Senior Information Security Officer - RMF/A&A Expert

Amentum company; Warrenton, Northern (VA, KY); Hybrid; USD 165,000 - 195,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) matching

Education reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability & life insurance

Pet insurance

Job summary

Amentum in Warrenton, VA is seeking a Senior Information System Security Officer to lead RMF-based A&A activities, develop security policies, and manage continuous monitoring across multiple systems. You will present executive briefings and coordinate risk assessments to maintain secure operations.

The ideal candidate has an active Top-Secret clearance with SCI, 8 years of relevant experience, deep knowledge of Windows and RHEL, and hands-on experience with XACTA, Nessus, Splunk, and DISA STIGs.

Qualifications

• Active Top-Secret clearance with SCI or ability to obtain SCI.
• 8 years of relevant information security experience.
• Strong knowledge of Windows OS and Red Hat Enterprise Linux.
• Experience with RMF/A&A and multiple operating systems.
• Familiarity with XACTA, ACAS/Nessus, Trellix, Splunk, and STIGs.

Responsibilities

• Generate and maintain security BoE and lead A&A per RMF.
• Develop and maintain information security policies and controls.
• Prepare Security Authorization packages and executive briefs.
• Audit security events using Splunk and Nessus to mitigate threats.
• Ensure risk assessments on system upgrades and interconnections.
• Maintain day-to-day security posture and continuous monitoring.

Skills

Top-Secret clearance with SCI

8 years experience

Windows & RHEL

RMF / A&A knowledge

Security monitoring (Splunk/Nessus)

DISA STIGs

Information security documentation

MS Office proficiency

Education

Bachelor’s degree in IT related field

Tools

XACTA

ACAS/Nessus

Trellix

Splunk

DISA Viewer

Job description

Amentum in Warrenton, VA is seeking a Senior Information System Security Officer to lead RMF-based A&A activities, develop security policies, and manage continuous monitoring across multiple systems. You will present executive briefings and coordinate risk assessments to maintain secure operations.

The ideal candidate has an active Top-Secret clearance with SCI, 8 years of relevant experience, deep knowledge of Windows and RHEL, and hands-on experience with XACTA, Nessus, Splunk, and DISA STIGs.