Expert Cyber Security Engineer (ISSO)

About the role

This role is an Information Systems Security Officer (ISSO) and Cyber Security Subject Matter Expert who bridges high-level security policy and its technical implementation. You will drive the Risk Management Framework (RMF) and Assessment & Authorization (A&A) lifecycle across multiple applications and environments, ensuring that system designs and implementations meet rigorous security objectives. The work protects mission-critical systems and reduces organizational risk.

Key responsibilities

• Gather information on systems, software, components, access permissions and data flows in the GEODS environments, and document the Body of Evidence artifacts for A&A packages.
• Review vulnerability scan and STIG reports, create patching and remediation plans, and document exceptions when patching or configuration requirements cannot be met.
• Build relationships with GEODS teams and agency A&A personnel to deliver required artifacts on time.
• Maintain Service+ information, including CMDB inventory and service tickets.
• Ensure systems comply with cyber security controls, STIG configurations, vendor security guides and enterprise security services (e.g., CRIBL, Trellix, Carbon Black).
• Perform vulnerability scan analysis, manual test plan checks, document non-compliance, POA&Ms and justifications, and support disaster recovery and incident response.
• Complete XACTA 360 sections and verify Body of Evidence deliverables, and support A&A test plan demonstrations.
• Work with the OPS team on patching strategies, take part in development sprint planning for change management, and evaluate proposed security architectures.

Required profile

• Bachelor's degree plus 10 years' experience, or associate's degree plus 12 years, or 14 years in a related field.
• TS/SCI clearance with a complete polygraph.
• CompTIA Security+ (at a minimum); preferred certifications include CISSP, CASP+, Security Pro or IAT II.
• Preferred: prior experience with NGA cyber security A&A processes, extensive experience with NIST SP 800-53 Rev 5, STIGs, POA&Ms, cloud/container/microservices A&A, and Nessus ACAS reports.

Required skills

• NIST SP 800-53 Rev 5, CNSSI 1253, Zero Trust and DISA STIGs.
• Windows Server, Red Hat Enterprise Linux and Oracle Linux, including vulnerability patching.
• AWS and Oracle Cloud administration (e.g., CAP Tool).
• XACTA 360, Nessus ACAS, and Service+.
• Ability to analyze large data sets such as Cloud Inventory reports and scan results.

Schedule: 9am to 5pm, Monday to Friday, at least four days at the customer or Amentum site. Most work is done at a desk or computer.