Information System Security Officer (ISSO)

Your Impact :

Are you interested in using your skills to help shape the Cyber, Security, & Intel space?  If so, look no further. Amentum is seeking a Information System Security Officer (ISSO) to join our team of passionate individuals in Elkridge, MD . In this role you will support challenging, mission-critical projects that make a direct impact on the Nation’s security and intelligence mission.

As an Information System Security Officer (ISSO) at Amentum, you will play a vital role in safeguarding national security by protecting the integrity, confidentiality, and availability of government-affiliated information systems. Your expertise will directly support critical defense and intelligence missions, ensuring that cybersecurity risks are identified, mitigated, and continuously monitored in alignment with stringent DoD and DIA standards.

By serving as the primary security advisor for assigned systems, your work will not only ensure operational compliance but will also contribute to the resilience and trustworthiness of mission-critical infrastructure relied upon by U.S. government agencies. Through close collaboration with engineers, system administrators, government clients, and security assessors, you will help design and maintain secure environments where innovation and mission success are achieved without compromising cybersecurity.

Your contributions will have a lasting impact, enabling rapid threat response, reduced risk exposure, and the sustained protection of sensitive data and digital assets vital to national defense and intelligence operations.

Responsibilities :

• Serve as the primary security advisor for assigned classified and unclassified information systems, ensuring alignment with DoD, DIA, and NIST guidelines.
• Ensure systems are configured, operated, and maintained in accordance with DIA Risk Management Framework (RMF) and DoD cybersecurity policies.
• Develop, implement, and continuously monitor system security plans (SSPs), POA&Ms, risk assessments, and related documentation.
• Lead or support system authorization and accreditation (A&A) activities, including system testing, security control validation, and interfacing with government Authorizing Officials (AOs).
• Maintain continuous monitoring and oversight of security controls, including regular auditing, vulnerability scanning, and compliance tracking.
• Perform daily audit log reviews, analyze security alerts, and verify system security settings.
• Track and report system vulnerabilities and status of remediation efforts.
• Coordinate with system owners, administrators, and program managers to ensure security compliance milestones are met.
• Maintain and update cybersecurity documentation to reflect current system architecture and security posture.
• Participate in technical meetings, design reviews, and risk analysis sessions for new or modified system components.
• Provide weekly security status reports to internal management and external stakeholders as required by the contract.
• Stay current with evolving DoD cybersecurity policies and threat intelligence relevant to classified systems.