The Information Systems Security Officer (ISSO) manages day-to-day security operations, including vulnerability scanning, STIG compliance, and incident triage for assigned systems. The role supports RMF reporting and maintains security evidence repositories within a high-security government environment.
Compensation
$160K–$200K / yr
Location
US-MD-Hanover
Work setup
Not specified
Seniority
Not specified
Employment
Contract
Experience
3+ years
Category
Security
Posted
Skills
corrective-action
cybersecurity
emergency-response
iam
network-security
networking
penetration-testing
reverse-engineering
typescript
Must have
TS/SCI with Poly clearance
IAM Tier I certification within 6 months
Doctoral degree with no experience, or Master's with 3 years, or Bachelor's with 5 years, or Associate's with 7 years of relevant experience
Nice to have
Degree in Information Assurance, Information Security, Information Systems, IT, Computer Networking, or Cyber Security
Experience in Risk Management Framework (RMF)
Full description
Purpose and Impact:
Independently executes and coordinates day-to-day security operations for assigned systems limited supervision. Leads execution of continuous monitoring technical activities, including scan scheduling/executed support, log/alert triage, STIG compliance verification, and security tool health/coverage checks. Coordinates remediation actions with system administrators and engineers, validates corrective actions through re-scan/re-check activities, and maintains accurate operational security evidence repositories. Provides technical evidence and posture inputs to the ISSM to support RMF reporting and assessments. The ISSO does not own RMF package governance, does not manage POA&Ms as the accountable authority, and does not make risk acceptance decisions.
Work Schedule: The courses being supported are active from 0800-1700 M-F. Contract core hours are 1000-1400.
Essential Responsibilities:
The Level 2 Information Systems Security Officer (ISSO) shall possess the following capabilities:
Lead day-to-day security operations for assigned systems, including monitoring/triage of security alerts/logs, validation of security tool health/coverage, and escalation of incidents per SOP. response activities as directed, and driving timely resolution/escalation of anomalies in accordance with established procedures
Plan and execute vulnerability and compliance scanning activities (credentialed/noncredentialled as approved), perform basic false-positive review, document results, and maintain remediation tickets with accurate technical detail.
Execute and validate STIG/compliance posture checks (as assigned) and coordinate remediation with administrators; validate fixes via re-check and document completion evidence.
Maintain security evidence repositories for assigned systems (scan outputs, STIG checklists, tool status evidence, access review artifacts as assiY1ed) ensuring labeling, access control, and retrievability.
Support IAM control execution by coordinating account actions with administrators and supporting periodic access reviews; document results and discrepancies for disposition by Government/ISSM
Provide technical security-impact inputs for proposed changes (affected components, required re-scan/re-test recommendations, control evidence impacts as observed) to support change control discussions (non-approval role).
Produce recurring technical posture inputs (scan tends, top recurring findings, remediation aging) for ISSW/Government reporting and drive timely updates of tickets to reflect current status.
Security Clearance Required:
TS/SCI with Poly
Minimum Education:
A Doctoral degree No experience; OR
A Master’s degree plus 3 year of relevant experience; OR
A Bachelor's degree plus 5 years of relevant experience; OR
An Associate's degree or 18 semester hours of military coursework/training in a computer-related field plus 7 years of relevant experience may be considered;
Degree in Information Assurance, Information Security, Information Systems, Information Technology, Computer Networking, Information Science, Cyber Security, or related is preferred
Minimum Years of Experience:
Relevant experience must be in information systems design, development, programming, information/computer/cyber/network security, vulnerability analysis, penetration testing, computer forensics, computer systems research, reverse engineering, and/or systems engineering (i.e., requirements analysis, design, implementation, testing, integration, deployment/installation, and maintenance). Experience in the Risk Management Framework (RNIF), Information Systems Security technologies, IT policies, and ability to interpret policies and directives is desired. Network and system administration may be used to meet some, but not all, of the relevant experience requirement.
Required Certifications:
Information Assurance Manager (IAM) Tier I certification requirements must be met within 6 months of assignment to the position. Maintaining certification status is required through continuous education training or sustainment training while serving in this work role
#javelin
As part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum’s role as a federal contractor and trusted partner to the US Government. Other Responsibilities:Safety - Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.
Quality - Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities.
Procedure Compliance - Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.
Compensation Details:
$160000 - $200000
The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.
Benefits Overview:
Our health and welfare benefits are designed to support you and your priorities. Offerings include:
Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance
Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.
Original Posting:
08/28/2026 - Until FilledAmentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.
Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.