Information Systems Security Engineer - Principal

Overview

Your Impact:
Are you interested in using your skills to help shape the Cyber, Security, & Intel space? If so, look no further. Amentum is seeking a Principal Information Systems Security Engineer to join our team of passionate individuals in Fort Meade, MD
. In this role you will support challenging, mission-critical projects that make a direct impact on the Nation’s security and intelligence mission.

In support of the Defense Information Systems Agency (DISA), the Intel and Cyber Division V2

MVP team supports a program providing crucial network capabilities to the Department of Defense. We are committed to retaining this team for prototype development, test, and demonstration, as well as potential long-term integration, deployment and sustainment as needed.

Candidates interested in joining the team must be critical thinkers, have a strong work ethic, and be able to work independently or as a member of a team in a dynamic environment that supports a critical and rewarding mission. We value candidates who are detail-oriented while also being able to think and react quickly to emerging and unique problem sets. To be successful, you must be able to rapidly adapt and learn how to operate the front and back end of new products and processes.

• Conduct cybersecurity risk assessments and provide prioritized risk mitigation recommendations in support of the technical solution requirements.
• Help define security requirements for new technology solutions and prototypes.
• Analyze solution architecture by evaluating against defined security requirements to identify security gaps, and provide mitigation strategy.
• Review security requirements while collaborating in multifunctional teams providing a holistic cyber security posture.
• Research and evaluate emerging technologies to determine cybersecurity effectiveness.
• Aid stakeholders through the design, build, configuration, and implementation of innovative solutions and capabilities.
• Engage stakeholders to ensure security objectives, protection needs, security requirements and associated validation methods are defined and implemented.
• Validate and verify system security requirements and establish system security design.
• Design, develop, implement, and integrate IA and security systems and components for networking, computing, and unified capabilities services, across multiple enclaves with different data protection/classification requirements.
• Assist architects and engineers in the identification and implementation of information security functionality to ensure uniform application of security policies.
• Contribute to the security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
• Utilize eMASS/XACTA to document security controls, track vulnerabilities, generate reports, and manage the ATO process.
• Prepare and review RMF artifacts to be used for new IS accreditation.
• Lead the creation and completion of System Security Plan (SSP) for a new IS prototype.
• Foster positive relationships between government, military, and contracting personnel.

• BS degree or equivalent in mathematics, telecommunications, electrical engineering, computer engineering, or computer science, Cybersecurity, Information Security, etc.
• 15 years of experience as a Cyber Security Engineer or Systems Engineer.
• Experience presenting technical information to both technical and non-technical audiences to include senior stakeholders.
• Expertise in the Risk Management Framework (RMF) and conducting cybersecurity risk assessments.
• Experience identifying, mitigating, and managing IT system Common Vulnerabilities and Exposures (CVEs) and Information Assurance Vulnerability Alerts (IAVAs).
• Experience using the MITRE ATT&CK framework to identify adversary TTPs.
• Experience using eMASS to manage Authority To Operate (ATO) processes.
• Experience developing and documenting system security requirements and conducting requirements gap analysis.
• Experience with security monitoring and incident response capabilities.
• Experience with emerging technologies such as Zero Trust, Cloud Computing, etc.
• Experience in…