Sr. Cybersecurity Engineer

Lumen Solutions Group Inc•Washington, DC

1d•Remote

About The Position

We are seeking a Senior Cybersecurity Engineer / Senior Information System Security Officer (ISSO) to provide cybersecurity design oversight, security governance, and risk-management support across enterprise technology initiatives. This individual will partner closely with business, technology, architecture, and cybersecurity teams to ensure security requirements are incorporated early in the solution design and delivery lifecycle. The Senior ISSO will support Agile Release Trains (ARTs) and strategic cyber-risk operations, helping teams deliver secure-by-design solutions that align with applicable regulatory, enterprise, and industry security standards. This role requires a seasoned cybersecurity professional who can translate security requirements into practical technical guidance, identify and communicate risk, and influence secure architecture and delivery decisions across a complex enterprise portfolio.

Requirements

Significant experience in cybersecurity engineering, information security, security architecture, IT risk management, or a closely related field.
Demonstrated experience serving in a senior ISSO, security engineering, security governance, or cybersecurity advisory capacity.
Strong understanding of secure-by-design, secure SDLC, threat/risk analysis, security controls, vulnerability remediation, and enterprise security governance.
Experience conducting or supporting security assessments, risk reviews, control assessments, remediation planning, and exception/risk-acceptance processes.
Ability to evaluate technical architectures and translate security requirements into actionable guidance for delivery teams.
Experience supporting Agile delivery environments and collaborating with cross-functional product, engineering, architecture, and operations teams.
Working knowledge of recognized security frameworks and standards, such as NIST, ISO 27001, CIS Controls, and other relevant regulatory or industry requirements.
Strong stakeholder-management, communication, documentation, and influencing skills.
Ability to work independently in a remote environment while managing multiple priorities across a large enterprise portfolio.

Nice To Haves

Experience supporting large, regulated, critical-infrastructure, transportation, public-sector, or similarly complex enterprise environments.
Experience with Agile Release Trains (ARTs), SAFe, DevSecOps, cloud security, or enterprise architecture governance.
Relevant certifications such as CISSP, CISM, CRISC, CCSP, Security+, or comparable cybersecurity credentials.

Responsibilities

Provide senior-level ISSO support, cybersecurity oversight, and security advisory services for enterprise systems, applications, platforms, and strategic initiatives.
Partner with Agile Release Trains (ARTs), product teams, solution architects, developers, infrastructure teams, and business stakeholders to embed security-by-design principles throughout planning, design, development, testing, deployment, and operational support.
Review proposed system and solution architectures to identify security gaps, design risks, control requirements, and remediation recommendations.
Ensure cybersecurity requirements are identified and incorporated early in the delivery lifecycle to reduce implementation risk, technical debt, and future remediation costs.
Lead or support security risk assessments, risk analysis, control evaluations, and documentation of security findings, exceptions, mitigation plans, and residual risk.
Advise teams on appropriate security controls, secure design practices, governance requirements, and compliance obligations.
Support adherence to applicable regulatory, enterprise, and industry security standards, policies, and procedures.
Serve as a key liaison between cybersecurity, enterprise architecture, technology delivery teams, and business stakeholders to enable compliant delivery of business objectives.
Communicate security risks, recommendations, and decision points clearly to both technical and non-technical audiences.
Contribute to the continuous improvement of cybersecurity governance, secure architecture practices, and enterprise risk-management processes.
Support strategic cybersecurity risk operations and related reporting, tracking, and executive-level visibility as needed.