Cybersecurity Information System Security Engineer - Clearance Required
About The Position
LMI is seeking a Senior Cybersecurity Information Systems Security Engineer (ISSE) to support the US Army Portfolio Acquisition Executive (PAE) Maneuver Ground office in Detroit, Michigan. The ISSE will support cybersecurity efforts for software and hardware, including Risk Management Framework (RMF) processes and Authority to Operate (ATO) approvals. The position requires an active Secret clearance and onsite presence in Detroit. The engineer collaborates with system engineers, program managers, Authorizing Officials, government stakeholders, contractor teams, the Information System Security Manager, and product teams. The role provides cybersecurity engineering expertise across cloud, on-premises, and hybrid environments; advises on risk treatment and security architecture; and supports secure, dependable systems throughout their lifecycle. The position also develops and maintains RMF and ATO documentation, including System Security Plans (SSPs) and Plans of Action and Milestones (POAMs), and uses dashboards and security scanning tools to monitor controls, findings, logs, and compliance. LMI describes itself as a digital solutions provider serving defense, space, healthcare, and energy sectors. It is headquartered in Tysons, Virginia, and focuses on technology, prototypes, commercial-grade platforms, and mission-ready AI for federal agencies.
Requirements
- Active Secret security clearance; the posting also states applicants must meet U.S. Government security-clearance eligibility requirements and that only U.S. citizens are eligible for a clearance.
- Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering from an ABET-accredited or NCAE-C designated institution.
- At least 5 years of hands-on system and/or security engineering experience within U.S. Government systems.
- Practical experience with government cloud platforms such as Azure, Amazon C2S, Commercial Cloud, or GovCloud, including secure security planning, design, and operations.
- Ability to develop and maintain RMF documentation, including SSPs and POAMs.
- Experience with DoD technologies, systems, and command and control policies and procedures.
- Hands-on experience using eMASS for compliance management and reporting.
- Familiarity with federal IT security requirements, including DoD cyber regulations, FedRAMP, and FISMA compliance.
- Knowledge of DoD STIGs, SRGs, NIST SP 800-53, and corresponding assessment procedures.
- Strong communication and interpersonal skills for working with technical teams and non-technical stakeholders.
- One or more of GISF, Security+, CASP+, CSSP, Cloud+, CSSLP, GSEC, or a GSEC-equivalent certification; if not already held, the required certification must be obtained within the first 30 days of employment.
- In-depth knowledge of computer networking concepts, protocols, and methodologies.
- Expertise in risk management processes for identifying, assessing, and mitigating risks.
- Understanding of national and international laws, regulations, policies, and ethical standards affecting cybersecurity operations.
- Knowledge of cybersecurity principles and practices, cyber threats, vulnerabilities, emerging attack vectors, and the operational impacts of cybersecurity lapses.
- Expertise in cloud service models including SaaS, IaaS, and PaaS, and understanding of private, public, and hybrid deployment models and on-premises versus off-premises environments.
Nice To Haves
- Expertise in cloud security planning, design, and operations.
- Experience with systems engineering lifecycle processes and Agile development methodologies.
- Familiarity with CI/CD frameworks and DevSecOps practices.
- Tactical military experience is strongly preferred.
Responsibilities
- Collaborate with system engineers, program managers, and Authorizing Officials or their delegates to define and implement system security requirements.
- Lead continuous monitoring and verification of cybersecurity requirements throughout the system lifecycle.
- Advise government stakeholders and contractor teams on cybersecurity matters.
- Design, review, and refine security architectures for cloud, on-premises, and hybrid environments.
- Support RMF processes to achieve and maintain ATO approvals.
- Identify, track, and mitigate security control gaps and non-compliance with applicable security standards.
- Conduct risk and vulnerability assessments and develop and maintain documentation such as SSPs.
- Manage and facilitate IATT activities, risk assessments, and ATO-related processes.
- Analyze security control deficiencies and assess their impact on enterprise risk and cybersecurity program effectiveness.
- Work with the ISSM and product teams to identify control gaps, propose mitigations, and prepare POAMs for ATO submission.
- Guide system engineers in remediating vulnerability findings using security scanning tools, DoD policies, and industry best practices.
- Evaluate cybersecurity alternatives and trade-offs and recommend risk treatment strategies.
- Collaborate with cross-functional teams to deliver secure and dependable systems.
- Develop and maintain dashboards to monitor system controls, logs, and compliance status and support reporting.
- Implement cloud cybersecurity solutions and practices.
- Apply NIST SP 800-53 Revision 4 or 5 controls and NIST SP 800-53A security assessment procedures.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
