Information Systems Security Engineer (ISSE)
LMI Consulting · Remote, UNAVAILABLE, US
About this role
## Overview LMI is seeking an **Information System Security Engineer (ISSE)** to design, implement, and validate security controls for **Amazon Web Services (AWS)** infrastructure and mission applications supporting Department of War mission partners. This is a **hands-on, remote** role focused on security architecture, hardening, AWS cloud and container security, automation, vulnerability remediation, and technical testing. **Security Clearance:** Requires an **active Secret** clearance. Periodic travel may be required for integration, assessments, customer meetings, and access to approved facilities. **All classified work must be performed in approved facilities.** ## Responsibilities - Translate mission needs and security requirements into system architectures, control implementations, secure configurations, and testable acceptance criteria. - Perform threat modeling and security design reviews (trust boundaries, attack surfaces, data flows, dependencies, and technical risks). - Engineer and implement security controls for **AWS**, **Linux**, **containers**, **Kubernetes**, application interfaces, and supporting services. - Configure and validate identity and access controls (least privilege), network segmentation, encryption, certificates, secrets management, audit logging, and security monitoring. - Apply **Defense Information Systems Agency (DISA) STIGs** and approved hardening baselines; test changes for security effectiveness and mission impact. - Integrate security scanning and checks into **CI/CD** pipelines (code, dependencies, container images, secrets, infrastructure configuration). - Use scripting, **Infrastructure as Code (IaC)**, and automation to deploy repeatable security controls, detect configuration drift, and collect technical evidence. - Analyze vulnerability findings, validate applicability, implement fixes, retest remediation, and propose compensating controls when immediate correction isn’t feasible. - Develop and execute security verification tests; support authorized assessments; troubleshoot application, network, cloud, identity, and container security controls. - Produce security diagrams, configuration baselines, control implementation details, and test evidence supporting **RMF** and **ATO** packages. - Coordinate remediation and closure evidence with the **ISSO** and **ISSM**; document residual risks and recommendations (do not independently accept risk). - Assess proposed system changes; maintain engineering documentation and runbooks. - Support incident investigation, recovery, and corrective actions with responsible operations teams. ## Qualifications ### Required Qualifications - **Active Secret** security clearance (ability to obtain/maintain **Top Secret** if required). - **Minimum 5 years** relevant experience in systems security engineering, cybersecurity engineering, cloud security, secure platform engineering, or related field. - Hands-on experience implementing, troubleshooting, and validating security controls (policy/compliance documentation experience alone is not sufficient). - Experience engineering or securing **DoD information systems**, including systems operating on or connected to **DODIN**. - Demonstrated hands-on experience implementing, securing, operating, and troubleshooting **AWS workloads** (must be able to describe AWS environments supported, controls personally implemented, and remediation validated). - Practical experience with **AWS IAM**, **VPC**, security groups, comp
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.