Dod Stigs Engineer Jobs

1 job found

Today

Cybersecurity Information System Security Engineer

LMI Detroit, MI

Detroit, MI

Today

$92k - $158k/yr Full time Authorization To Operate Cloud Cloud Platforms

Apply Now

Job Description

Join LMI as a Senior Cybersecurity Information Systems Security Engineer (ISSE) supporting the US Army Portfolio Acquisition Executive (PAE) Maneuver Ground office in Detroit, MI. This onsite role focuses on driving Risk Management Framework (RMF) execution to achieve and maintain Authority to Operate (ATO) approvals, pairing hands-on cybersecurity engineering with trusted advisory responsibilities across government and contractor teams.

Location: Detroit, MI (onsite)
Clearance: Active Secret clearance (minimum requirement)
Compensation: USD 92,075 - 158,138 per year

What you’ll do

Collaborate with system engineers, program managers, and Authorizing Officials (or their delegates) to define and implement system security requirements.
Lead continuous monitoring and verification of cybersecurity requirements across the system lifecycle.
Provide guidance and recommendations to government stakeholders and contractor teams as a trusted cybersecurity advisor.
Design, review, and refine system security architectures for cloud, on-premises, and hybrid environments.
Support RMF execution to achieve and maintain ATO approvals, including Interim Authority to Test (IATT) activities and related processes.
Identify, track, and mitigate security control gaps and non-compliance areas while ensuring alignment with applicable security standards.
Perform risk and vulnerability assessments, and develop and maintain critical documentation such as System Security Plans (SSPs).
Analyze and interpret security control deficiencies to evaluate their impact on enterprise risk and cybersecurity program effectiveness.
Partner with the Information System Security Manager (ISSM) and product teams to develop mitigations and prepare Program of Action and Milestones (POAMs) for ATO submission.
Guide system engineers in remediating vulnerability findings using state-of-the-art security scanning tools, DoD policies, and industry best practices.
Support cybersecurity engineering evaluation of alternatives, trade-offs, and risk treatment strategies.
Collaborate with cross-functional teams to deliver secure, dependable systems.
Develop and maintain dashboards to monitor platform controls, logs, and compliance status for reporting.
Apply NIST SP 800-53 Revision 4 or 5 security controls and NIST SP 800-53A security assessment procedures.

What you bring

Active SECRET clearance (minimum requirement).
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering from an ABET-accredited or NCAE-C designated institution.
5+ years of hands-on experience in system and/or security engineering within U.S. Government systems.
Practical experience working within government cloud platforms (examples include Azure, Amazon C2S, Commercial Cloud, or GovCloud), including secure security planning, design, and operations.
Proven ability to develop and maintain RMF documentation, including SSPs and POAMs.
Experience working with DoD technologies, systems, and command & control policies and procedures.
Hands-on experience using Enterprise Mission Assurance Support Service (eMASS) for compliance management and reporting.
Familiarity with federal IT security requirements, including DoD cyber regulations, FedRAMP, and FISMA compliance.
Knowledge of DoD STIGs, SRGs, and security requirements in NIST SP 800-53 and corresponding assessment procedures.
Strong communication and interpersonal skills with technical and non-technical stakeholders.
One or more certifications: GISF, Security+, CASP+, CSSP, Cloud+, CSSLP, GSEC, or a GSEC-equivalent. If not currently held, must obtain within the first 30 days of employment.

Tools and technologies

Azure, Amazon C2S, Commercial Cloud, GovCloud
Enterprise Mission Assurance Support Service (eMASS)
FedRAMP, FISMA
NIST SP 800-53, NIST SP 800-53A
DoD STIGs, SRGs
RMF, SSPs, POAMs, IATT

Core knowledge and skills

In-depth knowledge of computer networking concepts, protocols, and methodologies for network security.
Expertise in risk management processes to identify, assess, and mitigate risk.
Comprehensive understanding of laws, regulations, policies, and ethical standards impacting cybersecurity operations.
Strong grasp of cybersecurity principles and best practices for protecting information systems and data.
Awareness of cyber threats, vulnerabilities, and emerging attack vectors.
Understanding of how cybersecurity lapses impact systems, data integrity, and organizational objectives.
Knowledge of cloud service models including SaaS, IaaS, and PaaS.
Solid understanding of cloud deployment models (private, public, hybrid) and differences between on-premises and off-premises environments.

Preferred additional qualifications

Expertise in cloud security planning, design, and operations.
Experience with systems engineering lifecycle processes and Agile development methodologies.
Familiarity with CI/CD frameworks and DevSecOps practices.
Tactical military experience is strongly preferred.

View full job page →

Get Dod Stigs Engineer Jobs alerts

New Dod Stigs Engineer Jobs, daily.