Senior InfoSec Engineer: RMF, A&A & Cloud

Amentum; Chantilly (VA); On-site; USD 190,000 - 225,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Educational reimbursement

Parental leave

Paid time off

Job summary

Amentum is seeking a Principal Information System Security Engineer to lead cybersecurity engineering across applications and systems. The role focuses on RMF accreditation, risk assessments, and secure SDLC, including containerization security per NIST SP 800-190, with hands-on testing and cross‑functional collaboration.

You will drive A&A efforts, manage Plan of Action and Milestones, prepare BOEs, and develop security documentation.

Qualifications

• Bachelor’s degree in Security and Intelligence or related field required.
• Security+ CE, AWS Advanced Architect, and Splunk Fundamentals 1 and 2 certifications.
• 8+ years of experience in information system security engineering, risk assessment, and vulnerability management.
• Strong understanding of cloud computing, secure SDLC, and containerization security.
• Proven ability to develop security documentation and SOPs.
• Experience leading technical exchange meetings and managing project deliverables in compliance with security standards.

Responsibilities

• Oversee cybersecurity for applications in an agile environment.
• Manage A&A efforts for accreditations and reaccreditations.
• Secure authorization on new platforms using CCP knowledge.
• Coordinate decommissioning of replacement systems with no downtime.
• Conduct TEMs and liaison with departments for A&A.
• Track POAMs across systems and recommend remediation steps.
• Perform system self-scans to support accreditation efforts.
• Conduct risk assessments and technical planning for integration and verification.

Skills

Information security engineering

Risk assessment

Vulnerability management

Cloud computing

Secure SDLC

Containerization security

Documentation & SOPs

Leadership/Delivery

Compliance with security standards

Education

B.S. in Mathematics and/or Security and Intelligence

Tools

Splunk

Job description

Amentum is seeking a Principal Information System Security Engineer to lead cybersecurity engineering across applications and systems. The role focuses on RMF accreditation, risk assessments, and secure SDLC, including containerization security per NIST SP 800-190, with hands-on testing and cross‑functional collaboration.

You will drive A&A efforts, manage Plan of Action and Milestones, prepare BOEs, and develop security documentation.