Remote Senior Cyber Risk Analyst

Amentum; Frankfort (KY); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching retirement benefits

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax‑saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is hiring a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance team. You will own enterprise cyber risk assessment work, framing risk for business leadership and guiding accept/mitigate/remediate decisions.

The role involves identifying risk across networking, cloud, endpoint, and identity architectures, working with Compliance to ensure coherent risk treatment, and traveling up to 25%. Must be a U.S.

Qualifications

• 8+ years hands-on cybersecurity experience with real systems, or 4+ years with a Master’s degree and demonstrated depth.
• Experience in enterprise risk management and third-party cyber risk assessment.
• Current security certification; hands-on capability valued over credentials.
• Must be a U.S. Citizen; U.S. Remote telework within the United States.

Responsibilities

• Conduct cyber risk assessments across the enterprise to identify risk to confidentiality, integrity, and availability.
• Articulate cyber risk in business terms to leadership against risk appetite.
• Lead cyber risk reviews including third-party and software risk assessments.
• Ensure risk treatment aligns with multiple frameworks and controls.
• Evaluate risk implications of networking, cloud, endpoint, and identity decisions.
• Maintain knowledge of threat, regulatory, and technology landscapes.

Skills

Cyber risk assessment

Articulate risk

NIST knowledge

Communication skills

Autonomous work style

Travel readiness

Education

Bachelor's degree in Computer Science or related field

Security certification

Job description

Amentum is hiring a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance team. You will own enterprise cyber risk assessment work, framing risk for business leadership and guiding accept/mitigate/remediate decisions.

The role involves identifying risk across networking, cloud, endpoint, and identity architectures, working with Compliance to ensure coherent risk treatment, and traveling up to 25%. Must be a U.S.