Cybersecurity Engineer III

Amentum - Norfolk, VA

Full-time - Mid Level

Norfolk, VA

10,001+ employees

Professional, Scientific, and Technical Services

About the position

Amentum is seeking a Cybersecurity Engineer III to assist our Navy customer with systems and technical engineering services. This role will leverage your expertise through a disciplined and rigorous Systems Engineering (SE) process across all mission areas of the system under development and sustainment. You will be instrumental in helping our customer define, document, and adhere to an open systems approach that utilizes modular design, standards-based interfaces, and widely supported consensus-based standards in hardware, software, subsystems, and elements that comprise the specific system. As a Cybersecurity Engineer, you will participate as a member of various Integrated Product Teams (IPTs) and working groups. Your responsibilities will include developing Cyber Defense-in-Depth Architecture Diagrams for the system, sub-network, and platform network into which the system will be integrated. You will also be tasked with developing, maintaining, and performing Cyber test procedures and documenting results, as well as developing and updating Cyber Risk Mitigation Plans. Additionally, you will be responsible for developing and maintaining Risk Management Framework (RMF) packages in accordance with NAVSEA business rules. Your role will require you to document cross-domain interfaces and review Assured Compliance Assessment Solution (ACAS) vulnerability scans. You will analyze and evaluate Security Technical Implementation Guides (STIGs) and/or Security Content Automation Protocol (SCAP) content for each applicable system component. Furthermore, you will review, analyze, and evaluate user needs to create systems solutions that support overall business strategies. Documenting system requirements, defining scope and objectives, and creating system specifications that drive system development and implementation will also be part of your duties. You will function as a liaison between Cyber Security professionals and users, possessing both business and technical expertise, and contribute to moderately complex aspects of a project. This position requires both independent and collaborative work.

Responsibilities

• Participating as a member in various Integrated Product Teams (IPTs) and working groups.
• Developing Cyber Defense-in-Depth Architecture Diagrams for the system, sub-network, and platform network.
• Developing, maintaining, and performing Cyber test procedures and documenting results.
• Developing and updating Cyber Risk Mitigation Plans.
• Developing and maintaining Risk Management Framework (RMF) packages in accordance with NAVSEA business rules.
• Documenting cross-domain interfaces.
• Reviewing Assured Compliance Assessment Solution (ACAS) vulnerability scans.
• Reviewing, analyzing, and evaluating Security Technical Implementation Guides (STIGs) and/or Security Content Automation Protocol (SCAP) content for each applicable system component.
• Reviewing, analyzing, and evaluating user needs to create systems solutions that support overall business strategies.
• Documenting system requirements, defining scope and objectives, and creating system specifications that drive system development and implementation.
• Functioning as a liaison between Cyber Security professionals and users, contributing to moderately complex aspects of a project.
• Working independently and collaboratively.

Requirements

• Bachelor's Degree in a technical field.
• Active SECRET US Government Clearance required.
• 4 to 7 years of related experience in network computer equipment, system, and security.
• Experience working with DOD IA mandatory policies, standards, procedures, and policies.
• Cyber-Information Technology (IT)/Cybersecurity Workforce (CSWF) Intermediate Level knowledge and skills, with a certification in IA standards and policies.