Senior Information Systems Security Manager (ISSM)

About the role

Amentum is hiring a Senior Information Systems Security Manager (ISSM) for its Atlantic Undersea Test and Evaluation Center (AUTEC) office in West Palm Beach, Florida. This is a full-time on-site position with no remote capability. The ISSM owns the cybersecurity posture of all contractor-operated information systems at AUTEC, including those in West Palm Beach and on Andros Island, The Bahamas, and acts as the contractor's main cybersecurity point of contact with the Government.

Key responsibilities

• Lead AUTEC systems through the six DoD RMF steps (categorization to authorization and continuous monitoring) and keep every ATO current
• Build and maintain authorization packages in eMASS (SSP, security control traceability, risk assessments, POA&Ms) and coordinate assessments with the Security Control Assessor and Navy validators
• Run the continuous monitoring program (ACAS/Tenable scans, STIG and SRG checks, endpoint security reporting, log review) and track IAVM notices to closure
• Own the cybersecurity POA&M, prepare the site for Command Cyber Readiness/Operational Readiness inspections and report incidents to the Government
• Produce monthly cybersecurity status reports and supervise ISSOs and cybersecurity technicians, verifying DoD 8570/8140 qualifications
• Manage privileged access (DD Form 2875), write cybersecurity policies and procedures, and advise engineering and operations on secure design, including Zero Trust

Required profile

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field; Master's preferred
• At least 8 years of information assurance or cybersecurity experience, including at least 3 years as an ISSM or ISSO on DoD systems
• Hands-on experience taking DoD systems through RMF to an ATO, and hands-on eMASS
• Ability to obtain and maintain a Secret U.S. Government clearance (U.S. citizenship required); ability to travel, live and work on-site at the remote Andros Island location
• Preferred: Navy and DoD experience, prior ISSM duty on a GOCO site or OCONUS installation, experience with classified systems, and experience supervising a cybersecurity team of three or more

Required skills

• Certification: CISSP or CISM (preferred: CISSP-ISSMP or CISSP-ISSEP)
• Working knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI 1253 and DoDI 8510.01
• Experience applying DISA STIGs and SRGs and managing vulnerability remediation with ACAS/Tenable
• Preferred: Splunk or another SIEM, Trellix ESS, Microsoft security tooling, FedRAMP and DoD Cloud SRG, and Zero Trust familiarity

What we offer

• Estimated compensation of $125,000
• Health, dental and vision insurance, paid time off and holidays
• Retirement benefits including 401(k) matching, educational reimbursement, parental leave
• Employee stock purchase plan, tax-saving options, disability and life insurance, pet insurance