Subject Matter Expert (Secure the Enterprise)

About the role

Amentum is seeking a Subject Matter Expert (SME) 3 for a prime contract, acting as Lead Technical Advisor for the Secure the Enterprise (STE) and Zero Trust (ZT) initiatives. The role advises the Government Division Chief, Technical Director and Deputy Authorizing Official on STE/ZT strategies, policies and performance, and supports the security community at the highest level.

Key responsibilities

• Brief the Chief Information Security Officer and Chief Information Officer on STE data, trends, updates and changes
• Analyze and advise on TLS versions and cipher suites, NetFlow data, network device configuration, syslog and other audit log analysis, and user activity monitoring
• Help system personnel maintain the operational security posture required by STE compliance regulations, policies and playbooks
• Support an enterprise-level STE compliance program that enables RMF continuous monitoring
• Manually review evidence and justifications for compliance validations, determinations of applicability and exceptions, and recommend or approve/reject them
• Review automated STE compliance data for errors or inconsistencies and assess the effectiveness of IT and STE security controls
• Maintain STE security policies, implementation guidelines and customer training, and coordinate with software developers on requirements and testing

Required profile

• Master's degree in Computer Engineering, Computer Science, Computer Forensics or a related field, or a Bachelor's degree plus two more years of System Security experience (total 14 years)
• 12 years of experience in a System Security or related customer-interfacing technical lead position, including 2 years of technical project leadership
• Clearance: TS/SCI
• Experience briefing and working with senior government agency leadership, and building interagency relationships
• Preferred: familiarity with the Secure the Enterprise program and Zero Trust Initiative, and help desk experience

Required skills

• Full-stack data analysis solutions in Python and Django on Linux servers
• Working knowledge of RMF authorization processes (NIST SP 800-37), cloud architecture and commercial security tools
• Knowledge of communication protocols, encryption, PKI and authorization services; incident response collaboration
• Preferred: advanced Microsoft Office, Excel formulas, PowerPoint, VBA, ICD503, CNSSI1253, SP800-53

What we offer

• Compensation range of $220,000 - $250,000