Systems Engineer - Security

Amentum; Columbia (MD); On-site; USD 90,000 - 120,000; Full time

Job summary

Amentum is seeking a Systems Engineer - Security to implement, operate, and maintain cybersecurity solutions across enterprise and mission networks. You will administer vulnerability management platforms, conduct assessments, and coordinate remediation with system and network teams to sustain a secure computing environment.

The role requires hands-on work with ACAS/Tenable and Nessus scanners, endpoint protection, and RMF/NIST frameworks, in a DoD-aligned setting.

Qualifications

• 5+ years of experience in cybersecurity operations or security engineering.
• Experience deploying ACAS/Tenable Security Center and Nessus.
• Experience with vulnerability assessments and remediation in Windows and Linux environments.
• Experience with enterprise patch management solutions.
• Familiarity with DoD security requirements and RMF/NIST controls.

Responsibilities

• Deploy, configure, and maintain ACAS/Tenable Security Center infrastructure and scanning.
• Perform vulnerability scans across Windows, Linux, networks, and VMs.
• Prioritize remediations based on risk and mission impact.
• Remediate vulnerabilities with system and network admins.
• Develop vulnerability management processes, reporting, and metrics.
• Administer endpoint security platforms (Trellix/HBSS, Defender).
• Support DoD RMF activities and compliance assessments.
• Create scripts to automate vulnerability management and reporting.

Skills

Vulnerability management

ACAS/Tenable Security Center

Nessus scanners

RMF/NIST 800-53

DoD security knowledge

Scripting (PowerShell/Bash/Python)

Security hardening

TCP/IP networking

Education

Bachelor's Degree in IT/CS/Engineering or related field

High School Diploma or equivalent

Tools

Trellix/HBSS

Microsoft Defender

Tanium

SCAP/STIG tooling

WSUS/MECM/SCCM

ACAS

Job description

Come be part of a dynamic program that delivers enterprise infrastructure, systems engineering, and operational support across multiple mission-critical network environments. Our team designs, implements, and sustains modern technology solutions supporting real-world customer operations.

We foster a highly collaborative and technical culture that values innovation, continuous learning, and professional growth. Team members are encouraged to expand their expertise through training opportunities, cross‑functional collaboration, and hands‑on experience with a wide range of technologies supporting complex operational environments.

Work Schedule:

(shift hours and days of the week)

8hrs / day, 5 days per week, all onsite

Occasional after hours work for system maintenance

Essential Responsibilities:

The Systems Engineer - Security is responsible for implementing, operating, and maintaining cybersecurity solutions that support enterprise and mission networks. The engineer will administer vulnerability management platforms, conduct security assessments, remediate identified vulnerabilities, and work closely with systems and network administrators to maintain a secure computing environment.

• Deploy, configure, administer, and maintain ACAS/Tenable Security Center infrastructure and associated scanning solutions
• Perform credentialed and non-credentialed vulnerability scans across Windows, Linux, network, and virtualized environments
• Analyze vulnerability scan results and prioritize remediation efforts based on risk and mission impact
• Coordinate with system and network administrators to remediate vulnerabilities and validate corrective actions
• Develop and maintain vulnerability management processes, reporting, and metrics
• Administer endpoint security platforms such as Trellix/HBSS, Microsoft Defender, or equivalent solutions
• Implement, monitor, and maintain security controls in accordance with DoD security requirements and organizational policies
• Perform system hardening activities utilizing DISA STIGs, CIS Benchmarks, and security best practices
• Support operating system and application patch management efforts across Windows and Linux platforms
• Develop scripts and automation to improve vulnerability management, security compliance, and reporting capabilities
• Investigate security findings and provide recommendations for mitigation and risk reduction
• Support RMF activities, security audits, inspections, and compliance assessments
• Maintain security documentation, standard operating procedures, and system configuration baselines
• Collaborate with system administrators, network engineers, ISSOs, and cybersecurity personnel to improve overall security posture
• Support incident response and cybersecurity operations activities as required

Work Environment, Physical Demands, and Mental Demands:

Standard working environment

Minimum Requirements (Knowledge, Skills, and Abilities):

• 5+ years of experience supporting cybersecurity operations, vulnerability management, system administration, or security engineering activities
• Experience deploying and administering ACAS/Tenable Security Center and Nessus scanners
• Experience conducting vulnerability assessments and interpreting scan results
• Experience remediating operating system, application, and configuration vulnerabilities in Windows and Linux environments
• Experience with enterprise patch management solutions such as WSUS, Ivanti, MECM/SCCM, or equivalent technologies
• Familiarity with Trellix/HBSS, Microsoft Defender, Tanium, or similar endpoint security platforms
• Knowledge of DISA STIGs, SCAP Compliance Checker, and security hardening methodologies
• Experience supporting cybersecurity compliance initiatives including RMF, NIST 800-53, STIGs, and related DoD requirements
• Working knowledge of TCP/IP networking, firewalls, switches, routers, and network security principles
• Experience troubleshooting complex system and security issues within enterprise environments
• Ability to communicate technical security findings to both technical and non-technical stakeholders
• undefinedSecurity Clearance Required:TS / SCIMinimum Education:High School Diploma or equivalentPreferredBachelor's Degree in Information Technology, Computer Science, Engineering, or related fieldundefinedMinimum Years of Experience:5+Required Certifications:This is an IAT3 level billet. Applicant must have:- Required IAT Certs: one or more of the following: CISM, CISSP, or equivalent senior-level baseline certification- Required vendor certification in one or more relevant technologies (e.g., Microsoft, VMware, Cisco, NetApp, Pure Storage, HP, Dell, Linux+, Red Hat, HBSS, ACAS). Candidates without an active certification must obtain at least one within 6 months of hire Preferred Qualifications: AI if applicable to your programCurrent ACAS certification or demonstrated experience administering ACAS Security CenterExperience with Trellix ePO/HBSS administrationExperience supporting DoD or Intelligence Community environmentsExperience hardening Windows Server and Red Hat Enterprise Linux systemsExperience with Security Content Automation Protocol (SCAP) and STIG ViewerExperience implementing and supporting Zero Trust initiativesExperience with scripting and automation using PowerShell, Bash, or PythonExperience with Splunk, Elastic, Security Onion, or similar security monitoring platformsExperience supporting VMware or Nutanix environmentsPrior Security Operations Center experienceExperience with Zero Trust architecturesPrior Military experienceAdditional Hashtags:#javelinThis position [is not] designated as a safety sensitive position.As part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum’s role as a federal contractor and trusted partner to the US Government. Other Responsibilities:Safety - Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self‑aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.Quality - Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities.Procedure Compliance - Each employee must read, understand and implement the general and specific operational, safety, quality and environmental