Job description

Come be part of a dynamic program that delivers enterprise infrastructure, systems engineering, and operational support across multiple mission-critical network environments. Our team designs, implements, and sustains modern technology solutions supporting real-world customer operations. We foster a highly collaborative and technical culture that values innovation, continuous learning, and professional growth. Team members are encouraged to expand their expertise through training opportunities, cross-functional collaboration, and hands-on experience with a wide range of technologies supporting complex operational environments. Work Schedule: (shift hours and days of the week) 8hrs / day, 5 days per week, all onsite Occasional after hours work for system maintenance Essential Responsibilities: ( describe the day-to-day ) The Systems Engineer - Security is responsible for implementing, operating, and maintaining cybersecurity solutions that support enterprise and mission networks. The engineer will administer vulnerability management platforms, conduct security assessments, remediate identified vulnerabilities, and work closely with systems and network administrators to maintain a secure computing environment. Key responsibilities include: - Deploy, configure, administer, and maintain ACAS/Tenable Security Center infrastructure and associated scanning solutions - Perform credentialed and non-credentialed vulnerability scans across Windows, Linux, network, and virtualized environments - Analyze vulnerability scan results and prioritize remediation efforts based on risk and mission impact - Coordinate with system and network administrators to remediate vulnerabilities and validate corrective actions - Develop and maintain vulnerability management processes, reporting, and metrics - Administer endpoint security platforms such as Trellix/HBSS, Microsoft Defender, or equivalent solutions - Implement, monitor, and maintain security controls in accordance with DoD security requirements and organizational policies - Perform system hardening activities utilizing DISA STIGs, CIS Benchmarks, and security best practices - Support operating system and application patch management efforts across Windows and Linux platforms - Develop scripts and automation to improve vulnerability management, security compliance, and reporting capabilities - Investigate security findings and provide recommendations for mitigation and risk reduction - Support RMF activities, security audits, inspections, and compliance assessments - Maintain security documentation, standard operating procedures, and system configuration baselines - Collaborate with system administrators, network engineers, ISSOs, and cybersecurity personnel to improve overall security posture - Support incident response and cybersecurity operations activities as required Work Environment, Physical Demands, and Mental Demands: Standard working environment Minimum Requirements (Knowledge, Skills, and Abilities): 5 years of experience supporting cybersecurity operations, vulnerability management, system administration, or security engineering activities Experience deploying and administering ACAS/Tenable Security Center and Nessus scanners Experience conducting vulnerability assessments and interpreting scan results Experience remediating operating system, application, and configuration vulnerabilities in Windows and Linux environments Experience with enterprise patch management solutions such as WSUS, Ivanti, MECM/SCCM, or equivalent technologies Familiarity with Trellix/HBSS, Microsoft Defender, Tanium, or similar endpoint security platforms Knowledge of DISA STIGs, SCAP Compliance Checker, and security hardening methodologies Experience supporting cybersecurity compliance initiatives including RMF, NIST 800-53, STIGs, and related DoD requirements Working knowledge of TCP/IP networking, firewalls, switches, routers, and network security principles Experience troubleshooting complex system and security issues within enterprise environments Ability to communicate technical security findings to both technical and non-technical stakeholders undefined Security Clearance Required: TS / SCI Minimum Education: High School Diploma or equivalent Preferred Bachelor s Degree in Information Technology, Computer Science, Engineering, or related fieldundefined Minimum Years of Experience: 5 Required Certifications: This is an IAT3 level billet. Applicant must have: - Required IAT Certs: one or more of the following: CISM, CISSP, or equivalent senior-level baseline certification- Required vendor certification in one or more relevant technologies (e.g., Microsoft, VMware, Cisco, NetApp, Pure Storage, HP, Dell, Linux , Red Hat, HBSS, ACAS). Candidates without an active certification must obtain at least one within 6 months of hire Preferred Qualifications: AI if applicable to your program Current ACAS certification or demonstrated experience administering ACAS Security CenterExperience with Trellix ePO/HBSS administrationExperience supporting DoD or Intelligence Community environmentsExperience hardening Windows Server and Red Hat Enterprise Linux systemsExperience with Security Content Automation Protocol (SCAP) and STIG ViewerExperience implementing and supporting Zero Trust initiativesExperience with scripting and automation using PowerShell, Bash, or PythonExperience with Splunk, Elastic, Security Onion, or similar security monitoring platformsExperience supporting VMware or Nutanix environmentsPrior Security Operations Center experienceExperience with Zero Trust architecturesPrior Military experience Additional Hashtags: #javelin This position [is not] designated as a safety sensitive position. As part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum’s role as a federal contractor and trusted partner to the US Government. Other Responsibilities: Safety - Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams. Quality - Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities. Procedure Compliance - Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Compensation Details: $140,000 - $190,000 The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws. Benefits Overview: Our health and welfare benefits are designed to support you and your priorities. Offerings include: Health, dental, and vision insurance Paid time off and holidays Retirement benefits (including 401(k) matching) Educational reimbursement Parental leave Employee stock purchase plan Tax-saving options Disability and life insurance Pet insurance Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits. Original Posting: 10/12/2026 - Until Filled Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs. Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters .

Requirements

Must-haves

Work Schedule: (shift hours and days of the week)
8hrs / day, 5 days per week, all onsite
Occasional after hours work for system maintenance
Essential Responsibilities: ( describe the day-to-day )
Deploy, configure, administer, and maintain ACAS/Tenable Security Center infrastructure and associated scanning solutions
Perform credentialed and non-credentialed vulnerability scans across Windows, Linux, network, and virtualized environments
Analyze vulnerability scan results and prioritize remediation efforts based on risk and mission impact
Coordinate with system and network administrators to remediate vulnerabilities and validate corrective actions
Develop and maintain vulnerability management processes, reporting, and metrics
Administer endpoint security platforms such as Trellix/HBSS, Microsoft Defender, or equivalent solutions
Implement, monitor, and maintain security controls in accordance with DoD security requirements and organizational policies
Perform system hardening activities utilizing DISA STIGs, CIS Benchmarks, and security best practices
Support operating system and application patch management efforts across Windows and Linux platforms
Develop scripts and automation to improve vulnerability management, security compliance, and reporting capabilities
Investigate security findings and provide recommendations for mitigation and risk reduction
Support RMF activities, security audits, inspections, and compliance assessments
Maintain security documentation, standard operating procedures, and system configuration baselines
Collaborate with system administrators, network engineers, ISSOs, and cybersecurity personnel to improve overall security posture
Support incident response and cybersecurity operations activities as required
Work Environment, Physical Demands, and Mental Demands:
Standard working environment
Minimum Requirements (Knowledge, Skills, and Abilities):
5 years of experience supporting cybersecurity operations, vulnerability management, system administration, or security engineering activities
Experience deploying and administering ACAS/Tenable Security Center and Nessus scanners

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Parental Leave