Cybersecurity Information System Security Engineer

Cybersecurity Jobs; Detroit (MI); Presencial; USD 92.000 - 158.000; Jornada completa

Descripción de la vacante

LMI is hiring a Senior Cybersecurity Information System Security Engineer to support the US Army PAE Maneuver Ground office in Detroit, MI, onsite. The role emphasizes RMF efforts to obtain and maintain Authority to Operate (ATO) approvals across cloud and hybrid environments.

The ideal candidate holds an active SECRET clearance, a bachelor’s degree from an ABET/NCAE-C institution, and 5+ years of government-security engineering experience. Salary ranges from USD 92,075 to 158,138 per year.

Formación

• Active SECRET security clearance is required.
• Bachelor’s degree in IT, Cybersecurity, CS, IS, Data Science, or Software Engineering from an ABET-accredited or NCAE-C designated institution.
• 5+ years of hands-on system/security engineering experience in U.S. Government systems.
• Experience with government cloud platforms (Azure, Amazon C2S, GovCloud) and RMF/ATO processes.
• Familiarity with DoD cyber regulations, FedRAMP, FISMA, NIST SP 800-53/53A, and DoD STIGs/SRGs.

Responsabilidades

• Define and implement system security requirements with engineers and officials.
• Lead continuous monitoring and verification of cybersecurity requirements.
• Guide stakeholders on cybersecurity best practices and mitigations.
• Design security architectures for cloud, on-prem, and hybrid environments.
• Support RMF to achieve and maintain ATO approvals.
• Develop and maintain SSPs, POAMs, and related documentation.

Descripción del empleo

LMI is hiring a Senior Cybersecurity Information System Security Engineer to support the US Army Portfolio Acquisition Executive (PAE) Maneuver Ground office in Detroit, MI on an onsite basis. This role focuses on driving Risk Management Framework (RMF) efforts to achieve and maintain Authority to Operate (ATO) approvals, with the ability to shape security planning across cloud and hybrid environments.

What you’ll get: an opportunity to work at the intersection of cybersecurity engineering and government mission delivery, collaborating with system engineers, program leadership, and Authorizing Officials. The position requires an active Secret clearance and offers a salary range of USD 92,075 - 158,138 per year.

Responsibilities

• Collaborate with system engineers, program managers, and Authorizing Officials (or their delegates) to define and implement system security requirements.
• Lead continuous monitoring and verification of cybersecurity requirements throughout the system lifecycle.
• Provide trusted cybersecurity guidance and recommendations to government stakeholders and contractor teams.
• Design, review, and refine system security architectures for cloud, on-premises, and hybrid environments.
• Support the RMF process to achieve and maintain ATO approvals.
• Identify, track, and mitigate security control gaps and non-compliance, ensuring alignment with security standards.
• Conduct risk and vulnerability assessments, and develop and maintain key documentation including System Security Plans (SSPs).
• Manage and facilitate Interim Authority to Test (IATT) activities, risk assessments, and all ATO-related processes.
• Analyze security control deficiencies and determine their impact on enterprise risk levels and cybersecurity program effectiveness.
• Partner with the Information System Security Manager (ISSM) and product teams to identify control gaps, propose mitigations, and support Program of Action and Milestones (POAM) submissions.
• Guide system engineers on mitigation of vulnerability findings using security scanning tools, DoD policies, and industry best practices.
• Evaluate alternatives, assess trade-offs, and recommend risk treatment strategies as part of cybersecurity engineering activities.
• Collaborate cross-functionally to support delivery of secure and dependable systems.
• Develop and maintain dashboards to monitor platform system controls, logs, and compliance status for reporting.
• Apply cloud cybersecurity solutions and practices.
• Apply NIST SP 800-53 Revision 4 or 5 security controls and NIST SP 800-53A security assessment procedures.

Requirements

• Active SECRET security clearance (minimum requirement).
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering from an ABET-accredited or NCAE-C designated institution.
• 5+ years of hands-on experience in system and/or security engineering within U.S. Government systems.
• Practical experience working within government cloud platforms (e.g., Azure, Amazon C2S, Commercial Cloud, or GovCloud), including secure implementation of security planning, design, and operations.
• Proven ability to develop and maintain RMF documentation, including SSPs and POAMs.
• Experience working with DoD technologies, systems, and command & control policies and procedures.
• Hands-on experience utilizing Enterprise Mission Assurance Support Service (eMASS) for compliance management and reporting.
• Familiarity with federal IT security requirements, including DoD cyber regulations, FedRAMP, and FISMA compliance.
• Knowledge of DoD STIGs, SRGs, and security requirements outlined in NIST SP 800-53 and corresponding assessment procedures.
• Strong communication and interpersonal skills for interactions with technical teams and non-technical stakeholders.
• One or more certifications: GISF, Security+, CASP+, CSSP, Cloud+, CSSLP, GSEC, or GSEC-equivalent. If not currently held, must obtain within the first 30 days of employment.

Technologies

• Azure
• Amazon C2S
• Commercial Cloud
• GovCloud
• Enterprise Mission Assurance Support Service (eMASS)
• FedRAMP
• FISMA
• NIST SP 800-53
• NIST SP 800-53A
• DoD STIGs
• SRGs
• RMF
• SSPs
• POAMs
• IATT

Core Knowledge (KSATS – DoD Cyber Workforce)

• In-depth knowledge of computer networking concepts, protocols, and methodologies to ensure effective network security.
• Expertise in risk management processes for identifying, assessing, and mitigating risks.
• Comprehensive understanding of national and international laws, regulations, policies, and ethical standards impacting cybersecurity operations.
• Proficient knowledge of core cybersecurity principles and best practices for protecting information systems and data.
• Awareness of cyber threats, vulnerabilities, and emerging attack vectors.
• Strong understanding of operational impacts cybersecurity lapses can impose on systems, data integrity, and organizational objectives.
• Expertise in cloud computing service models: SaaS, IaaS, and PaaS.
• Solid understanding of cloud deployment models: private, public, and hybrid, including differences between on-premises and off-premises environments.

Preferred Additional Qualifications

• Expertise in cloud security planning, design, and operations.
• Experience with systems engineering lifecycle processes and Agile development methodologies.
• Familiarity with Continuous Integration/Continuous Delivery (CI/CD) frameworks and DevSecOps practices.
• Tactical military experience is strongly preferred.