Apply on Employer Site

LMI · 2 months ago

Cybersecurity Engineer (DHS)

United States

Full-time

Remote

Senior Level, Lead/Staff

$120K/yr - $207K/yr

8+ years exp

LMI is a digital solutions provider focused on enhancing government outcomes through technology and innovation. The Cybersecurity Engineer will support the Department of Homeland Security by managing cybersecurity documentation, advising on system risks, and ensuring compliance with cybersecurity policies.

AnalyticsConsultingInformation TechnologyLogisticsManagement ConsultingProfessional Services

Comp. & Benefits

No H1B

U.S. Citizen Only

Responsibilities

Acquire and manage all necessary documentation/artifacts, including cybersecurity support and resources, to support IT cybersecurity goals and objectives from a risk management perspective

Advise senior management on system risk levels and cybersecurity posture for cloud-based environments

Assist in the deployment, architecture and configuration of security controls of deployed systems with Cloud Architects

Ensure that developed systems and architectures are consistent with all applicable DHS cybersecurity policies and guidelines

Perform Assessment and Authorization (A&A) cybersecurity reviews, identify gaps, and support risk management plans for cybersecurity personnel to execute

Provide input on cybersecurity requirements and collect and maintain data needed to meet system cybersecurity compliance reporting

Provide subject matter expertise for Risk Management Framework (RMF) activities and related documentation to support system accreditation / Authority to Operate (ATO) requirements

Interpret noncompliance to determine the impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program

Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs)

Coordinate with geographically-distributed, multi-discipline teams to ensure compliance with all applicable requirements for cybersecurity are addressed

Ensure that plans of action and milestones (POAM) or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc. and support necessary remediation/compliance activities

Participate in recurring cybersecurity working group meetings

Work with program ISSOs and ISSMs to effectively aggregate technical details for government leadership including the cybersecurity lead, project managers, program managers to facilitate succinct and effective risk discussions and provide understanding of respective program risks

Provide security support and evaluation to development teams to integrate information assurance/cyber security and remediate vulnerabilities throughout the System Life Cycle Development

Participate in ATT and ATO activities

Support the organization's program that implements information systems security technology and procedures, to include access control and authentication of users and transmitted information

Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures (SOPs) on the security of information systems

Review DHS policy and develop local policy and procedures that implement the DHS Cybersecurity subprograms and initiatives

Review and evaluate system and network changes for cybersecurity impact and effect on confidentiality, integrity, availability, and overall system security posture

Create and submit Plan of Actions & Milestones (POA&M) for review and approval by the Authorizing Official (AO)

Qualification

Cybersecurity solutionsRisk Management Framework (RMF)Certified Information Systems Security Professional (CISSP)Cybersecurity toolsCloud security complianceNIST controlsTeam collaborationDocumentation skillsProblem-solving

Required

Bachelor's degree in a related field

8+ years demonstrated experience designing, implementing, and monitoring cybersecurity solutions

8+ years demonstrated RMF

Familiarity with cybersecurity tools such as ACAS and Tenable

Certified Information Systems Security Professional (CISSP) (or Associate), Certified Information Security Manager (CISM), or Security + certification

Expertise in identifying and classifying technical security requirements and specifications

Experience developing and evaluating enterprise and system security designs and related architectures

Experience developing or ensuring development adheres to cybersecurity requirements and best practices (e.g., NIST controls)

Familiarity with commercial off-the-shelf solutions for specific security capabilities

DHS/CBP background investigation highly preferred