Systems Engineer - Security

Amentum•Columbia, MD

4d•$140,000 - $190,000•Onsite

About The Position

Come be part of a dynamic program that delivers enterprise infrastructure, systems engineering, and operational support across multiple mission-critical network environments. Our team designs, implements, and sustains modern technology solutions supporting real-world customer operations. We foster a highly collaborative and technical culture that values innovation, continuous learning, and professional growth. Team members are encouraged to expand their expertise through training opportunities, cross-functional collaboration, and hands-on experience with a wide range of technologies supporting complex operational environments.

Requirements

5+ years of experience supporting cybersecurity operations, vulnerability management, system administration, or security engineering activities.
Experience deploying and administering ACAS/Tenable Security Center and Nessus scanners.
Experience conducting vulnerability assessments and interpreting scan results.
Experience remediating operating system, application, and configuration vulnerabilities in Windows and Linux environments.
Experience with enterprise patch management solutions such as WSUS, Ivanti, MECM/SCCM, or equivalent technologies.
Familiarity with Trellix/HBSS, Microsoft Defender, Tanium, or similar endpoint security platforms.
Knowledge of DISA STIGs, SCAP Compliance Checker, and security hardening methodologies.
Experience supporting cybersecurity compliance initiatives including RMF, NIST 800-53, STIGs, and related DoD requirements.
Working knowledge of TCP/IP networking, firewalls, switches, routers, and network security principles.
Experience troubleshooting complex system and security issues within enterprise environments.
Ability to communicate technical security findings to both technical and non-technical stakeholders.
TS/SCI Security Clearance Required.
High School Diploma or equivalent.
One or more of the following IAT Certs: CISM, CISSP, or equivalent senior-level baseline certification.
One or more relevant vendor certifications (e.g., Microsoft, VMware, Cisco, NetApp, Pure Storage, HP, Dell, Linux+, Red Hat, HBSS, ACAS). Candidates without an active certification must obtain at least one within 6 months of hire.

Nice To Haves

Current ACAS certification or demonstrated experience administering ACAS Security Center.
Experience with Trellix ePO/HBSS administration.
Experience supporting DoD or Intelligence Community environments.
Experience hardening Windows Server and Red Hat Enterprise Linux systems.
Experience with Security Content Automation Protocol (SCAP) and STIG Viewer.
Experience implementing and supporting Zero Trust initiatives.
Experience with scripting and automation using PowerShell, Bash, or Python.
Experience with Splunk, Elastic, Security Onion, or similar security monitoring platforms.
Experience supporting VMware or Nutanix environments.
Prior Security Operations Center experience.
Experience with Zero Trust architectures.
Prior Military experience.
Bachelor's Degree in Information Technology, Computer Science, Engineering, or related field.

Responsibilities

Implement, operate, and maintain cybersecurity solutions that support enterprise and mission networks.
Administer vulnerability management platforms, conduct security assessments, and remediate identified vulnerabilities.
Work closely with systems and network administrators to maintain a secure computing environment.
Deploy, configure, administer, and maintain ACAS/Tenable Security Center infrastructure and associated scanning solutions.
Perform credentialed and non-credentialed vulnerability scans across Windows, Linux, network, and virtualized environments.
Analyze vulnerability scan results and prioritize remediation efforts based on risk and mission impact.
Coordinate with system and network administrators to remediate vulnerabilities and validate corrective actions.
Develop and maintain vulnerability management processes, reporting, and metrics.
Administer endpoint security platforms such as Trellix/HBSS, Microsoft Defender, or equivalent solutions.
Implement, monitor, and maintain security controls in accordance with DoD security requirements and organizational policies.
Perform system hardening activities utilizing DISA STIGs, CIS Benchmarks, and security best practices.
Support operating system and application patch management efforts across Windows and Linux platforms.
Develop scripts and automation to improve vulnerability management, security compliance, and reporting capabilities.
Investigate security findings and provide recommendations for mitigation and risk reduction.
Support RMF activities, security audits, inspections, and compliance assessments.
Maintain security documentation, standard operating procedures, and system configuration baselines.
Collaborate with system administrators, network engineers, ISSOs, and cybersecurity personnel to improve overall security posture.
Support incident response and cybersecurity operations activities as required.