Cybersecurity Information System Security Engineer - Clearance Required

LMI Consulting, LLC; Fort Belvoir (VA); On-site; USD 92,075 - 158,138; Full time

Job summary

LMI is seeking a Senior Cybersecurity Information Systems Security Engineer (ISSE) for Ft. Belvoir, VA. The role requires an active SECRET clearance and onsite presence.

You will drive RMF/ATO efforts across cloud, on-prem, and hybrid environments, collaborating with system engineers, ISSM, and government stakeholders to ensure secure, compliant systems. Responsibilities include defining security requirements, continuous monitoring, vulnerability management, and producing critical documents like

Qualifications

• Active SECRET security clearance required.
• Bachelor's degree in IT, Cybersecurity, CS, IS, Data Science, or Software Engineering from an ABET-accredited or NCAE-C designated institution.
• 5+ years of hands-on system and/or security engineering experience in U.S. Government systems.
• Experience with government cloud platforms and RMF documentation (SSPs/POAMs).
• Familiarity with DoD cyber regulations, FedRAMP, and FISMA compliance.
• Knowledge of DoD STIGs/SRGs and NIST SP 800-53 assessment procedures.
• One or more certifications: GISF, Security+, CASP+, CSSP, Cloud+, CSSLP, GSEC, or equivalent (to be obtained within 30 days).

Responsibilities

• Define and implement system security requirements with engineers and Officials.
• Lead continuous monitoring and verification of cybersecurity requirements throughout the lifecycle.
• Provide guidance to government stakeholders and contractor teams as a trusted advisor.
• Design, review, and refine security architectures for cloud, on-prem, and hybrid environments.
• Support RMF processes to achieve and maintain ATO approvals.
• Identify and mitigate security control gaps aligning with standards.
• Conduct risk and vulnerability assessments; maintain SSPs and related docs.
• Manage IATT activities and all ATO-related processes and milestones.
• Analyze deficiencies to assess impact on enterprise risk and program effectiveness.
• Work with ISSM and product teams to address control gaps and prepare POAM plans.
• Guide mitigation of findings using scanning tools and DoD policies.
• Advise on risk treatment strategies and alternative solutions.
• Collaborate with cross-functional teams to deliver secure systems.
• Develop dashboards to monitor controls, logs, and compliance status.
• Demonstrate cloud security solutions expertise and best practices.
• Apply NIST SP 800-53 Rev 4/5 and 800-53A procedures.

Skills

Networking concepts

Risk management

Cybersecurity fundamentals

Threat awareness

Cloud computing knowledge

Cloud deployment models

DoD regulations knowledge

Communication skills

Security frameworks (RMF/NIST)

Education

ABET/NCAE-C accredited BS in IT/Cybersecurity/CS/IS/Data Science/Software Eng

Tools

eMASS

SSP templates

POAM tracking

Job description

Cybersecurity Information System Security Engineer - Clearance Required

Job Location: US-VA-Fort Belvoir

Overview

LMI is seeking a skilled Senior Cybersecurity Information Systems Security Engineer (ISSE) to support US Army Capability Program Executive (CPE) Gound office at Ft. Belvoir, Virginia. The ISSE will drive efforts that support software and hardware cybersecurity Risk Management Framework (RMF) Authority to Operate (ATO).

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

This position requires an active Secret clearance and onsite presence at Ft. Belvoir, VA.

Responsibilities

• Collaborate with system engineers, program managers, and Authorizing Officials (or their delegates) to define and implement system security requirements.
• Lead efforts to ensure continuous monitoring and verification of cybersecurity requirements throughout the system lifecycle.
• Serve as a trusted cybersecurity advisor, providing guidance and recommendations to government stakeholders and contractor teams.
• Design, review, and refine system security architectures for cloud, on-premises, and hybrid environments.
• Support the Risk Management Framework (RMF) process to achieve and maintain Authority to Operate (ATO) approvals.
• Identify, track, and mitigate security control gaps and areas of non-compliance, ensuring alignment with security standards.
• Conduct risk assessments, vulnerability assessments, and develop and maintain critical documentation, such as System Security Plans (SSPs).
• Manage and facilitate Interim Authority to Test (IATT) activities, risk assessments, and all ATO-related processes.
• Analyze and interpret security control deficiencies to assess their impact on enterprise risk levels and cybersecurity program effectiveness.
• Partner with the Information System Security Manager (ISSM) and product teams to identify control gaps, propose mitigations, and prepare Program of Action and Milestone (POAM) plans for ATO submission.
• Guide system engineers on the mitigation of vulnerability findings using state-of-the-art security scanning tools, DoD policies, and industry best practices.
• Provide cybersecurity engineering expertise in evaluating alternatives, assessing trade-offs, and recommending risk treatment strategies.
• Collaborate with cross-functional teams to ensure the delivery of secure and dependable systems.
• Develop and maintain dashboards to monitor platform system controls, logs, and compliance status, ensuring seamless reporting.
• Demonstrate expertise in implementing cloud cybersecurity solutions and practices.
• Apply NIST SP 800-53 Revision 4 or 5 security controls and security assessment procedures from NIST SP 800-53A.

Core Knowledge, Skills, Abilities, and Tasks (KSATs) - DoD Cyber Workforce (DCWF)

• In-depth knowledge of computer networking concepts, protocols, and methodologies to ensure effective network security.
• Expertise in risk management processes, including methodologies for identifying, assessing, and mitigating risks.
• Comprehensive understanding of national and international laws, regulations, policies, and ethical standards impacting cybersecurity operations.
• Proficient knowledge of core cybersecurity principles and best practices for protecting information systems and data.
• Awareness of cyber threats, vulnerabilities, and emerging attack vectors that could compromise systems and information.
• Strong understanding of the specific operational impacts that cybersecurity lapses can impose on systems, data integrity, and organizational objectives.
• Expertise in cloud computing service models, including Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).
• Solid understanding of cloud computing deployment models, including private, public, hybrid, and the key differences between on-premises and off-premises environments.
• Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.

Minimum Qualifications

• Active SECRET security clearance (minimum requirement).
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering from an ABET-accredited or NCAE-C designated institution.
• 5+ years of hands-on experience in system and/or security engineering within U.S. Government systems.
• Practical experience working within government cloud platforms (e.g., Azure, Amazon C2S, Commercial Cloud, or GovCloud), including secure implementation of security planning, design, and operations.
• Proven ability to develop and maintain Risk Management Framework (RMF) documentation, including System Security Plans (SSPs) and Plans of Action and Milestones (POAMs).
• Experience working with DoD technologies, systems, and command & control policies and procedures.
• Hands-on experience utilizing Enterprise Mission Assurance Support Service (eMASS) for compliance management and reporting.
• Familiarity with federal IT security requirements, including DoD cyber regulations, FedRAMP, and FISMA compliance.
• Knowledge of DoD STIGs, SRGs, and security requirements outlined in NIST SP 800-53 and its corresponding assessment procedures.
• Strong communication and interpersonal skills, capable of effectively interacting with both technical teams and non-technical stakeholders.
• One or more of the following certifications: GISF, Security+, CASP+, CSSP, Cloud+, CSSLP, GSEC, or GSEC-equivalent. (If not currently held, must obtain within the first 30 days of employment).

Preferred Additional Qualifications

• Expertise in cloud security planning, design, and operations.
• Experience with systems engineering lifecycle processes and Agile development methodologies.
• Familiarity with Continuous Integration/Continuous Delivery (CI/CD) frameworks and DevSecOps practices.
• Tactical military experience is strongly preferred.

Target salary range: $92,075 - $158,138.39

Applicants must meet eligibility requirements for a U.S. Government security clearance. Only U.S. Citizens are eligible for a security clearance. For this position, LMI will only consider applicants with security clearances or applicants who are eligible for security clearances, due to the nature of the work.

Equal Employment Opportunity

LMI is an Equal Opportunity Employer. LMI is committed to the fair treatment of all and to our policy of providing applicants and employees with equal employment opportunities. LMI recruits, hires, trains, and promotes people without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, disability, age, protected veteran status, citizenship status, genetic information, or any other characteristic protected by applicable federal, state, or local law. If you are a person with a disability needing assistance with the application process, please contact [e-mail].