24 hours ago
Remote, United StatesSenior
Base Salary
$130k - $140k/yr
Responsibilities
- Implement and maintain cloud security controls, guardrails, secure landing zones, workload protections, and virtual desktop protections across Microsoft 365 Commercial, GCC High, Azure, AWS, and hybrid-cloud services.
- Configure and test security policies, infrastructure-as-code controls, deployment automation, integrations, and practical remediation changes.
- Administer cloud security posture management and workload protection capabilities, including onboarding, policy configuration, coverage monitoring, alert integrations, exception tuning, and platform health.
- Integrate cloud security telemetry with Security Operations and managed security providers, support escalated investigations, and coordinate exposure remediation with Vulnerability Management and cloud platform owners.
- Implement and validate controls supporting CMMC, NIST SP 800-171, NIST SP 800-172, CUI workloads, government-cloud boundaries, DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, and GDPR requirements.
- Perform technical risk assessments and control testing while maintaining implementation records, evidence, exceptions, and remediation status for audits.
- Implement security controls for AI and machine-learning services, enterprise copilots, generative AI applications, RAG systems, agents, and automated tool integrations.
- Configure identity, permissions, secrets handling, sandboxing, tool restrictions, human approvals, network egress, logging, and other safeguards for AI systems.
- Test AI security controls against prompt injection, sensitive-data exposure, unsafe tool execution, excessive privileges, unauthorized service use, and grounding-content manipulation.
- Collaborate with identity, network, data security, detection and incident response, IT, program-site, and application teams; maintain standards, diagrams, procedures, and support documentation.
- Participate in second-level SOC activities and provide infrequent off-hours support for critical security incidents.
Requirements
- Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field, or an equivalent combination of education and relevant experience.
- Five years of related experience, including at least three years in cloud, security, systems, or infrastructure engineering.
- U.S. citizenship is required.
- Hands-on experience with Microsoft cloud or AWS security capabilities and the ability to support Microsoft 365, Azure, AWS, and hybrid services.
- Experience implementing or maintaining technical controls through cloud policy, scripting, automation, or infrastructure as code.
- Working knowledge of cloud identity, network security, data protection, logging, posture management, workload protection, generative AI security, and agentic-system risks.
- Ability to support technical risk assessments, control testing, remediation documentation, and audit evidence collection.
- Preferred experience with cloud security posture management, workload protection, cloud-native application protection, Microsoft 365 GCC High or comparable government-cloud environments, and regulated cloud workloads.
- Preferred knowledge of CMMC, NIST SP 800-171, NIST SP 800-172, DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, or comparable requirements.
- Preferred hands-on experience securing cloud AI or machine-learning services, enterprise copilots, generative AI applications, RAG systems, agents, or automated tool integrations.
- Relevant security or cloud certification such as Security+, an Azure or AWS security certification, CCSP, or comparable training is preferred.
Benefits
- Health, dental, and vision insurance.
- Paid time off and holidays.
- Retirement benefits including 401(k) matching.
- Educational reimbursement.
- Parental leave.
- Employee stock purchase plan.
- Tax-saving options.
- Disability and life insurance.
- Pet insurance.
- Typical office environment with occasional lifting up to 50 pounds and infrequent as-needed off-hours support; benefits may vary by employment type, location, and applicable agreements.
About Amentum
Amentum provides engineering, operations and maintenance, logistics, and mission support services to U.S. federal agencies and allied governments, including defense and energy programs. Its business centers on large, long-term government contracts spanning defense, space, nuclear cleanup, and infrastructure, with program management and technical services at the core. Headquartered in Chantilly, Virginia, it was formed in 2020 from the spinoff of AECOM’s Management Services division.