Senior Information Systems Security Engineer (ISSE)

Amentum; Chantilly (VA); On-site; USD 190,000 - 225,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

Retirement benefits (401(k) matching)

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum seeks a Principal Information System Security Engineer in Chantilly, VA to lead cybersecurity engineering, risk assessments, and RMF accreditation across applications and systems.

You will drive A&A efforts, manage POAMs, perform self-scans, and guide secure software development lifecycles including containerization security per NIST guidelines.

Qualifications

• Bachelor's Degree in Security and Intelligence, or related field.
• Security+ CE, AWS Advanced Architect, and Splunk Fundamentals 1 and 2 certifications.
• Extensive experience in information system security engineering, risk assessment, and vulnerability management.
• Strong understanding of cloud computing services, secure software development lifecycles, and containerization security.
• Proficient in creating and maintaining security documentation and SOPs.
• Demonstrated experience in leading technical exchange meetings, managing project deliverables, and ensuring compliance with security standards and policies.

Responsibilities

• Oversee cybersecurity measures for applications within an agile software environment.
• Manage the assessment and authorization (A&A) efforts for accrediting and reaccrediting system authorizations.
• Utilize common control provider (CCP) knowledge to secure authorization for applications on new platforms.
• Work closely with stakeholders to ensure seamless decommissioning and accreditation of replacement systems with no downtime.
• Conduct TEMs and liaise with key departments to facilitate A&A efforts.
• Track and manage POAMs across all systems, ensuring completion and recommending remediation steps.
• Conduct system self-scan to support initial, update, and reaccreditation efforts.
• Perform technical planning, system integration, verification and validation, and risk assessments.
• Create Basis of Estimate (BOE) documentation and other critical artifacts for system A&A efforts.
• Develop and document security evaluation of test plans and procedures.
• Provide documentation and recommendations for security best practices and RMF accreditation.
• Drive application security and secure SDLCs, including containerization security per NIST SP 800-190.
• Conduct hands-on security testing, analyze test results, and recommend countermeasures.
• Provide guidance on cloud services, deployment architecture, and network management tools.
• Review project requirements and assist in development and tracking of project tasks and client deliverables.
• Communicate with clients on project activities and manage deliverables.
• Facilitate process workgroups to analyze existing processes and create new business strategies.

Skills

Security+ CE

AWS Advanced Architect

Splunk Fundamentals 1

Splunk Fundamentals 2

Information security engineering

Risk assessment

Vulnerability management

Cloud computing

Secure SDLC

Containerization security

Security documentation

SOPs

Technical leadership

Project deliverables

Education

Bachelor's Degree in Security and Intelligence

B.S. in Mathematics

Tools

None

Job description

Your Impact:

We are seeking a highly skilled and experienced Principal Information System Security Engineer to join our team. The successful candidate will bring extensive knowledge and hands‑on experience in cybersecurity engineering, risk management frameworks, and secure software development lifecycle management. This role involves leading and managing accreditation efforts, conducting risk assessments, and collaborating with cross-functional teams to ensure the highest standards of information security across our applications and systems.

Responsibilities:

• Oversee cybersecurity measures for applications within an agile software environment.
• Manage the assessment and authorization (A&A) efforts for accrediting and reaccrediting system authorizations.
• Utilize common control provider (CCP) knowledge to secure authorization for applications on new platforms.
• Work closely with stakeholders to ensure seamless decommissioning and accreditation of replacement systems with no downtime.
• Conduct technical exchange meetings (TEMs) and liaise with key departments to facilitate A&A efforts.
• Track and manage Plan of Action and Milestones (POAMs) across all systems, ensuring completion and recommending remediation steps.
• Conduct system self‑scans to support initial, update, and reaccreditation efforts.
• Perform technical planning, system integration, verification and validation, and risk assessments.
• Create Basis of Estimate (BOE) documentation and other critical artifacts for system A&A efforts.
• Develop and document security evaluation of test plans and procedures.
• Provide documentation and recommendations for security best practices and risk management framework (RMF) accreditation.
• Drive application security and secure software development lifecycles, including containerization security as per NIST SP 800190.
• Conduct hands‑on security testing, analyze test results, and recommend countermeasures.
• Provide guidance on cloud computing services, deployment architecture, and network management tools.
• Review project requirements and assist in the development and tracking of project tasks and client deliverables.
• Communicate with clients on project specific activities and manage project related deliverables.
• Facilitate process working groups to analyze existing processes and create new business strategies.

Requirements:

• Bachelor's Degree in Security and Intelligence, or a related field.
• Security+ CE, AWS Advanced Architect, and Splunk Fundamentals 1 and 2 certifications.
• Extensive experience in information system security engineering, risk assessment, and vulnerability management.
• Strong understanding of cloud computing services, secure software development lifecycles, and containerization security.
• Proficient in creating and maintaining security documentation and Standard Operating Procedures (SOPs).
• Demonstrated experience in leading technical exchange meetings, managing project deliverables, and ensuring compliance with security standards and policies.

Clearance Required:

• TS/SCI w/ poly

Minimum Education:

• B.S. in Mathematics and/or Security and Intelligence, or a related field.

Minimum Years of Experience:

• 8

Preferred:

• Excellent technical writing and documentation skills
• Proven ability to collaborate with multidisciplinary teams

#javelin

This position is not designated as a safety sensitive position.

As part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug‑free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre‑hire screening for marijuana, as well as other federally controlled substances due to Amentum’s role as a federal contractor and trusted partner to the US Government.

Other Responsibilities:

Safety - Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self‑aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.

Quality - Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities.

Procedure Compliance - Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.

Compensation Details:

$190,000 - $225,000

The compensation range or hourly rate listed for this position is provided as a good‑faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.

Benefits Overview:

Our health and welfare benefits are designed to support you and your priorities. Offerings include:

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax‑saving options
• Disability and life insurance
• Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara‑O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.

Original Posting:

08/13/2026 - Until Filled

Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.

Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low‑income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.