Systems Engineer - Security

Amentum•Columbia, MD

3d•Onsite

About The Position

Come be part of a dynamic program that delivers enterprise infrastructure, systems engineering, and operational support across multiple mission-critical network environments. Our team designs, implements, and sustains modern technology solutions supporting real-world customer operations. We foster a highly collaborative and technical culture that values innovation, continuous learning, and professional growth. Team members are encouraged to expand their expertise through training opportunities, cross-functional collaboration, and hands-on experience with a wide range of technologies supporting complex operational environments.

Requirements

5+ years of experience supporting cybersecurity operations, vulnerability management, system administration, or security engineering activities
Experience deploying and administering ACAS/Tenable Security Center and Nessus scanners
Experience conducting vulnerability assessments and interpreting scan results
Experience remediating operating system, application, and configuration vulnerabilities in Windows and Linux environments
Experience with enterprise patch management solutions such as WSUS, Ivanti, MECM/SCCM, or equivalent technologies
Familiarity with Trellix/HBSS, Microsoft Defender, Tanium, or similar endpoint security platforms
Knowledge of DISA STIGs, SCAP Compliance Checker, and security hardening methodologies
Experience supporting cybersecurity compliance initiatives including RMF, NIST 800-53, STIGs, and related DoD requirements
Working knowledge of TCP/IP networking, firewalls, switches, routers, and network security principles
Experience troubleshooting complex system and security issues within enterprise environments
Ability to communicate technical security findings to both technical and non-technical stakeholders
TS / SCI Security Clearance Required
High School Diploma or equivalent
This is an IAT3 level billet.
Required IAT Certs: one or more of the following: CISM, CISSP, or equivalent senior-level baseline certification
Required vendor certification in one or more relevant technologies (e.g., Microsoft, VMware, Cisco, NetApp, Pure Storage, HP, Dell, Linux+, Red Hat, HBSS, ACAS). Candidates without an active certification must obtain at least one within 6 months of hire

Nice To Haves

Current ACAS certification or demonstrated experience administering ACAS Security Center
Experience with Trellix ePO/HBSS administration
Experience supporting DoD or Intelligence Community environments
Experience hardening Windows Server and Red Hat Enterprise Linux systems
Experience with Security Content Automation Protocol (SCAP) and STIG Viewer
Experience implementing and supporting Zero Trust initiatives
Experience with scripting and automation using PowerShell, Bash, or Python
Experience with Splunk, Elastic, Security Onion, or similar security monitoring platforms
Experience supporting VMware or Nutanix environments
Prior Security Operations Center experience
Experience with Zero Trust architectures
Prior Military experience
Bachelor's Degree in Information Technology, Computer Science, Engineering, or related field

Responsibilities

Deploy, configure, administer, and maintain ACAS/Tenable Security Center infrastructure and associated scanning solutions
Perform credentialed and non-credentialed vulnerability scans across Windows, Linux, network, and virtualized environments
Analyze vulnerability scan results and prioritize remediation efforts based on risk and mission impact
Coordinate with system and network administrators to remediate vulnerabilities and validate corrective actions
Develop and maintain vulnerability management processes, reporting, and metrics
Administer endpoint security platforms such as Trellix/HBSS, Microsoft Defender, or equivalent solutions
Implement, monitor, and maintain security controls in accordance with DoD security requirements and organizational policies
Perform system hardening activities utilizing DISA STIGs, CIS Benchmarks, and security best practices
Support operating system and application patch management efforts across Windows and Linux platforms
Develop scripts and automation to improve vulnerability management, security compliance, and reporting capabilities
Investigate security findings and provide recommendations for mitigation and risk reduction
Support RMF activities, security audits, inspections, and compliance assessments
Maintain security documentation, standard operating procedures, and system configuration baselines
Collaborate with system administrators, network engineers, ISSOs, and cybersecurity personnel to improve overall security posture
Support incident response and cybersecurity operations activities as required
Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.
Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities.
Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job.