Cybersecurity Information System Security Engineer - Clearance Required
About The Position
LMI is seeking a skilled Senior Cybersecurity Information Systems Security Engineer (ISSE) to support the US Army Portfolio Acquisition Executive (PAE) Maneuver Ground office in Detroit, Michigan. The ISSE will lead efforts supporting software and hardware cybersecurity Risk Management Framework (RMF) activities and Authority to Operate (ATO) approvals. The position requires an active Secret clearance and onsite presence in Detroit. The role collaborates with system engineers, program managers, Authorizing Officials, government stakeholders, contractor teams, the Information System Security Manager (ISSM), and product teams. It provides cybersecurity engineering expertise across cloud, on-premises, and hybrid environments, and supports secure system delivery throughout the system lifecycle. The engineer conducts and coordinates risk and vulnerability assessments, maintains RMF documentation, helps address control gaps and vulnerability findings, and monitors and reports on system controls and compliance. LMI is a digital solutions provider serving defense, space, healthcare, and energy sectors. The company describes its work as helping federal agencies accelerate mission impact through technology, prototypes, commercial-grade platforms, and mission-ready AI.
Requirements
- Active Secret security clearance; minimum requirement.
- Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering from an ABET-accredited or NCAE-C designated institution.
- At least 5 years of hands-on system and/or security engineering experience within U.S. Government systems.
- Practical experience with government cloud platforms such as Azure, Amazon C2S, Commercial Cloud, or GovCloud, including secure security planning, design, and operations.
- Ability to develop and maintain RMF documentation, including System Security Plans and Plans of Action and Milestones.
- Experience with DoD technologies, systems, and command and control policies and procedures.
- Hands-on experience using Enterprise Mission Assurance Support Service (eMASS) for compliance management and reporting.
- Familiarity with federal IT security requirements, including DoD cyber regulations, FedRAMP, and FISMA compliance.
- Knowledge of DoD STIGs, SRGs, and security requirements in NIST SP 800-53 and its assessment procedures.
- Strong communication and interpersonal skills for interacting with technical teams and non-technical stakeholders.
- One or more of the following certifications: GISF, Security+, CASP+, CSSP, Cloud+, CSSLP, GSEC, or GSEC-equivalent; if not held, the certification must be obtained within the first 30 days of employment.
- In-depth knowledge of computer networking concepts, protocols, and methodologies for network security.
- Expertise in risk management processes, including risk identification, assessment, and mitigation.
- Understanding of laws, regulations, policies, and ethical standards affecting cybersecurity operations.
- Knowledge of cybersecurity principles and best practices for protecting information systems and data.
- Awareness of cyber threats, vulnerabilities, and emerging attack vectors.
- Understanding of the operational impacts of cybersecurity lapses on systems, data integrity, and organizational objectives.
- Expertise in cloud service models, including SaaS, IaaS, and PaaS.
- Understanding of private, public, and hybrid cloud deployment models and differences between on-premises and off-premises environments.
- Applicants must meet U.S. Government security clearance eligibility requirements; only U.S. citizens are eligible for a security clearance.
Nice To Haves
- Expertise in cloud security planning, design, and operations.
- Experience with systems engineering lifecycle processes and Agile development methodologies.
- Familiarity with Continuous Integration/Continuous Delivery frameworks and DevSecOps practices.
- Tactical military experience is strongly preferred.
Responsibilities
- Collaborate with system engineers, program managers, and Authorizing Officials or their delegates to define and implement system security requirements.
- Lead continuous monitoring and verification of cybersecurity requirements throughout the system lifecycle.
- Advise government stakeholders and contractor teams on cybersecurity matters and provide recommendations.
- Design, review, and refine system security architectures for cloud, on-premises, and hybrid environments.
- Support the Risk Management Framework process to achieve and maintain Authority to Operate approvals.
- Identify, track, and mitigate security control gaps and areas of non-compliance in alignment with security standards.
- Conduct risk and vulnerability assessments and develop and maintain documentation, including System Security Plans.
- Manage and facilitate Interim Authority to Test activities, risk assessments, and ATO-related processes.
- Analyze security control deficiencies and assess their impact on enterprise risk and cybersecurity program effectiveness.
- Partner with the ISSM and product teams to identify control gaps, propose mitigations, and prepare Program of Action and Milestone plans for ATO submission.
- Guide system engineers in mitigating vulnerability findings using security scanning tools, DoD policies, and industry best practices.
- Evaluate cybersecurity engineering alternatives and trade-offs, and recommend risk treatment strategies.
- Collaborate with cross-functional teams to deliver secure and dependable systems.
- Develop and maintain dashboards to monitor system controls, logs, and compliance status and support reporting.
- Implement cloud cybersecurity solutions and practices.
- Apply NIST SP 800-53 Revision 4 or 5 security controls and NIST SP 800-53A security assessment procedures.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
