Senior Cyber Risk Analyst (Remote, US)

Amentum company; Northern (KY); Hybrid; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Paid time off and holidays

401(k) with matching

Job summary

Amentum, a global leader in engineering and technology solutions, is seeking a Senior Cybersecurity Risk Analyst for US remote work. You will own the enterprise cyber risk assessment program and translate risk into actionable guidance for business leadership.

The role requires 8+ years in cybersecurity, strong knowledge of NIST frameworks, and the ability to communicate risk to non-technical stakeholders. A US citizenship is required; travel up to 25% may be needed.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with real technology environments.
• US Citizenship required for US remote role.
• Current Security+ or equivalent certification is required.

Responsibilities

• Conduct enterprise cyber risk assessments across the organization.
• Articulate cyber risk to business and technical leadership in decision-ready terms.
• Lead cyber risk reviews including third-party risk and software risk assessments.
• Collaborate with Compliance to ensure coherent risk treatment across frameworks.
• Evaluate risk implications of networking, cloud, endpoint, and identity architectures.
• Identify residual risk and specify required risk reduction.

Skills

Cyber risk assessment

NIST standards

Communication skills

Independent work

Travel up to 25%

Cloud/Identity awareness

Education

Bachelor's degree in Computer Science, Information Systems or related field

Tools

Microsoft Azure

Microsoft 365

Azure Government GCC High

Job description

Amentum, a global leader in engineering and technology solutions, is seeking a Senior Cybersecurity Risk Analyst for US remote work. You will own the enterprise cyber risk assessment program and translate risk into actionable guidance for business leadership.

The role requires 8+ years in cybersecurity, strong knowledge of NIST frameworks, and the ability to communicate risk to non-technical stakeholders. A US citizenship is required; travel up to 25% may be needed.