{"id":3663409,"url":"https://alion.io/job/amentum-cybersecurity-engineer-cloud","title":"Cybersecurity Engineer (Cloud)","company":{"id":14861,"name":"Amentum","domain":"amentum.com","url":"https://alion.io/company/amentum","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":445,"ghost_share":0,"stale_share":0.962,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Richmond, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":130000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CMMC","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Machine Learning","optional":false},{"name":"RAG","optional":false}],"status":"live","first_seen_at":"2026-11-02T00:00:00Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T19:24:31Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Purpose and scope\nThe Cloud Security Engineer implements and maintains security controls across commercial and government cloud environments, including Microsoft 365 Commercial and GCC High, Azure, AWS, hybrid-cloud services, and approved cloud-based artificial intelligence services. The role turns security architecture and regulatory requirements into working guardrails, configurations, automation, control evidence, and telemetry. Success requires hands-on cloud engineering and a working understanding of government, defense-industry, privacy, and international security frameworks. A central responsibility is implementing the controls needed to adopt generative AI, machine learning, enterprise copilots, and agentic systems safely across commercial, government, and CUI environments. The role also administers assigned cloud security platforms and supports risk assessment, control testing, remediation, and audit readiness. This role reports to the Senior Cybersecurity Architect & Senior Manager.\nEssential responsibilities\nCloud security engineering\nImplement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services, including cloud guardrails, secure landing zones, workload protections, and virtual desktop environments.\nConfigure and test security policies, infrastructure-as-code controls, deployment automation, and supporting integrations in coordination with cloud platform and application owners.\nReview technical findings, troubleshoot control failures, and recommend practical configuration changes that reduce risk without unnecessarily disrupting services.\nCloud security platform administration\nAdminister assigned cloud security posture management and workload protection capabilities, including environment onboarding, policy configuration, security recommendations, coverage monitoring, and alert integrations.\nMaintain platform health and configuration, tune controls, document exceptions, and identify gaps in cloud coverage.\nIntegrate cloud security telemetry with Security Operations and the managed security service provider. Support escalated investigations when cloud expertise is needed.\nCoordinate exposure prioritization and tracking with Vulnerability Management and work with cloud platform owners on remediation. The role does not own the underlying cloud services or their remediation queues.\nGovernment cloud and compliance engineering\nImplement and validate technical controls that support CMMC and applicable NIST requirements, including NIST SP 800-171 and NIST SP 800-172.\nSupport Microsoft 365 GCC High and CUI workloads with an understanding of government-cloud service limitations, tenant and security boundaries, data handling requirements, and controlled connectivity with commercial environments.\nTranslate applicable requirements from DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, and other relevant frameworks into practical cloud configurations in coordination with Risk and Compliance.\nPerform technical risk assessments and control testing; maintain implementation records, evidence, exceptions, and remediation status for assessments and audits.\nArtificial intelligence and agent security\nImplement and operate security controls for approved AI and machine-learning services, enterprise copilots, generative AI applications, retrieval-augmented generation, agents, and tool integrations.\nConfigure identity and access controls, data-source permissions, secrets handling, execution boundaries, sandboxing, tool restrictions, human approval controls, network egress, logging, and other safeguards defined by Architecture.\nTest controls against risks such as prompt injection, indirect prompt injection, sensitive-data exposure, unsafe tool execution, over-privileged agents, unapproved model or service use, and manipulation of grounding content.\nEvaluate AI service configurations and new platform features for security, privacy, data residency, government-cloud availability, and CUI handling before implementation.\nAutomate repeatable AI security configurations and validation checks through policy, scripting, infrastructure as code, and deployment pipelines where practical.\nIntegrate relevant AI activity and security telemetry with enterprise monitoring and support investigations requiring AI expertise.\nCollaboration and documentation\nWork with Identity, Network Security, Data Security, Detection and Incident Response, IT, connected program sites, and application teams to implement controls within their areas of responsibility.\nMaintain configuration standards, implementation guides, diagrams, operating procedures, and support documentation for assigned cloud security capabilities.\nTranslate applicable security and regulatory requirements into technical configurations and provide evidence or technical input for assessments and audits when requested.\nStay current on cloud and AI security threats and recommend improvements based on observed risk, platform changes, and operational experience.\nParticipate in 2nd-level Security Operations Center (SOC) activities, e.g. respond to critical security incidents escalated by a MSSP. Provide off-hours support on an infrequent, but as needed basis.\nPerforms other duties as assigned.\nKnowledge, Skills, & Abilities\nWorking knowledge of cloud identity, network security, data protection, logging, posture management, and workload protection concepts.\nWorking knowledge of generative AI and agentic-system security risks, including data exposure, prompt injection, tool and connector permissions, agent identities, secure execution, and audit logging.\nAbility to support technical risk assessments, control testing, remediation documentation, and audit evidence collection.\nAbility to troubleshoot technical issues, document work clearly, manage priorities, and collaborate with technical and non-technical partners.\nMinimum qualifications\nU.S. citizenship is required for this position.\nBachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field, or an equivalent combination of education and relevant experience.\nFive years of related experience, to include three or more years of relevant experience in cloud, security, systems, or infrastructure engineering.\nHands-on experience with Microsoft cloud or AWS security capabilities and the ability to support Microsoft 365, Azure, AWS, and hybrid services as needed.\nExperience implementing or maintaining technical controls through cloud policy, scripting, automation, or infrastructure as code.\nPreferred qualifications\nExperience with a cloud security posture management, workload protection, or cloud-native application protection platform.\nPractical experience with, or demonstrated understanding of, Microsoft 365 GCC High or a comparable government cloud environment and the security boundaries associated with regulated data.\nDirect experience supporting government, defense-industrial-base, CUI, or other regulated cloud environments.\nWorking knowledge of government and defense-industry security requirements, including CMMC, NIST SP 800-171 and NIST SP 800-172 concepts.\nFamiliarity with DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, or comparable regulatory and international requirements.\nHands-on experience securing cloud AI or machine-learning services, enterprise copilots, generative AI applications, retrieval-augmented generation, agents, or automated tool integrations.\nA relevant security or cloud certification, such as Security+, an Azure or AWS security certification, CCSP, or comparable training.\nWork environment, physical demands and mental demands\nTypical office environment with no unusual hazards, occasional lifting up to 50 pounds, constant sitting while using a computer terminal, constant use of sight while reviewing documents, constant use of speech and hearing for communication, constant mental alertness, and the ability to plan and organize work and meet deadlines. Other related cloud security duties may be assigned.\nCompensation Details:\n$130K - 140KThe compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.\nBenefits Overview:\nOur health and welfare benefits are designed to support you and your priorities. Offerings include:\nHealth, dental, and vision insurance\n\nPaid time off and holidays\n\nRetirement benefits (including 401(k) matching)\n\nEducational reimbursement\n\nParental leave\n\nEmployee stock purchase plan\n\nTax-saving options\n\nDisability and life insurance\n\nPet insurance\n\nNote: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.\nOriginal Posting:\nAmentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.\nAmentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.","description_format":"text","description_chars":10193,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Military Logistics","Facilities Management"],"lifecycle":[{"event":"open","at":"2026-11-03T04:26:09Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":122500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":17,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":true},"html_url":"https://alion.io/job/amentum-cybersecurity-engineer-cloud","json_url":"https://alion.io/job/amentum-cybersecurity-engineer-cloud.json","meta":{"generated_at":"2026-11-04T20:02:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30896,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14861},"rest":"https://alion.io/mcp/rest/get_company?id=14861"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famentum-cybersecurity-engineer-cloud"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famentum-cybersecurity-engineer-cloud"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famentum-cybersecurity-engineer-cloud"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amentum-cybersecurity-engineer-cloud\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famentum-cybersecurity-engineer-cloud"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3663409}},{"tool":"search_jobs","arguments":{"company":"amentum.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3663409},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}