Senior InfoSec Specialist - RMF/A&A & Compliance Expert

Amentum; Falls Church (VA); On-site; USD 190,000 - 250,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum seeks an INFOSEC Specialist/ISSM to perform IT project risk assessments on government sponsored networks and develop security policies and standards. You will support RMF/A&A processes, review system designs, and produce reports on trends and mitigation strategies.

Experience: 8–10 years in information security, TS clearance with polygraph, and knowledge of NISPOM, ICDs, DCIDs, and cloud security. This role requires strong written and briefing skills and the ability to work independently

Qualifications

• 8–10 years information security experience.
• Bachelor's degree in IT with audits, risk management, or internal controls on government systems.

Responsibilities

• Review system architectures and network diagrams for security risks.
• Support RMF/A&A activities and apply ICD 503, NISPOM, and other federal guidelines.
• Produce annual A&A reports with trends, risks, and mitigation.
• Write and maintain AIS security plans and ensure sponsor approvals.
• Investigate malware alerts and coordinate remediation with program security teams.

Skills

InfoSec expertise

Independent worker

Policy writing

Briefing & reporting

Education

Bachelor's degree in IT with audits, risk management, or internal controls on government systems

Job description

Amentum seeks an INFOSEC Specialist/ISSM to perform IT project risk assessments on government sponsored networks and develop security policies and standards. You will support RMF/A&A processes, review system designs, and produce reports on trends and mitigation strategies.

Experience: 8–10 years in information security, TS clearance with polygraph, and knowledge of NISPOM, ICDs, DCIDs, and cloud security. This role requires strong written and briefing skills and the ability to work independently