Note: The job is a remote job and is open to candidates in USA. Lumen Technologies is a leading provider of AI-powered connectivity solutions. They are seeking a Lead Information Security Engineer to own the development and maintenance of security authorization packages, ensuring compliance with federal requirements and effective risk management for critical systems.
Responsibilities
- Serve as the primary ISSO for assigned systems, accountable for end-to-end RMF execution and ATO outcomes
- Execute the full RMF lifecycle, including categorization, control implementation, assessment readiness, authorization support, and continuous monitoring
- Develop, maintain, and ensure accuracy of authorization artifacts (e.g., SSP, POA&M, control evidence)
- Ensure systems remain ATO-compliant, audit-ready, and aligned with federal requirements (e.g., FedRAMP, FISMA, DoD)
- Track, prioritize, and drive remediation of vulnerabilities, audit findings, and control deficiencies
- Provide system-level risk assessments and actionable recommendations, including impact and remediation considerations
- Monitor vulnerability, audit, and continuous monitoring data to maintain awareness of system risk posture
- Coordinate with engineering, operations, and program teams to ensure security controls are implemented effectively and sustainably
- Support security assessments, audits, and inspections as the ISSO representative, including direct interaction with assessors and customer stakeholders
- Evaluate products, services, and proposed architectures for compliance, risk, and implementation feasibility within customer authorization environments
- Support customer integration of managed services by defining control responsibilities, inheritance boundaries, and implementation expectations
- Provide input grounded in RMF execution and ATO processes to support solution design, capture efforts, and delivery alignment
Skills
- Bachelor's degree in information assurance, cybersecurity, or a related field, or equivalent experience
- Minimum of 5 years of relevant experience in information assurance, with demonstrated responsibility for RMF execution and ATO support
- Proven experience developing and maintaining authorization artifacts (e.g., SSP, POA&M) and supporting security assessments
- Strong working knowledge of NIST RMF (SP 800-37) and NIST SP 800-53 control framework
- Demonstrated experience executing RMF activities and supporting or leading ATO outcomes for federal or DoD systems
- Experience with FedRAMP and/or FISMA authorization processes, including artifact development and assessment readiness
- Ability to independently execute RMF activities and manage system-level security posture with minimal oversight
- Strong understanding of control implementation, inheritance, and shared responsibility models within complex or hybrid environments
- Ability to assess and communicate security risk in complex architectures, translating regulatory requirements into actionable guidance
- Experience evaluating security, compliance, and delivery feasibility of products, services, and architectures
- Working knowledge of cryptographic principles and emerging standards, including post-quantum cryptography (PQC), and ability to assess vendor solutions for compliance, risk, and implementation considerations
- Strong collaboration skills across engineering, operations, program management, and security teams
- Effective written and verbal communication skills for both technical and non-technical audiences
- Demonstrates Lumen leadership behaviors (teamwork, trust, transparency, clarity, courage, customer focus, growth mindset, respect)
- US citizenship required
- The capability to meet the suitability requirements for a GSA public trust position is required
- Experience operating in customer-facing or services-based environments supporting federal or regulated clients is strongly preferred
- Relevant certifications in governance, risk, and compliance (e.g., CGRC, CISA) are strongly preferred or equivalent demonstrated RMF experience
- Broad security certifications (e.g., CISSP, CCSP) are preferred and may supplement GRC experience
- Proficiency with technologies, tools, and processes supporting GRC, vulnerability management, and continuous monitoring
Benefits
- Comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing.
- Bonus structure (short-term incentives, long-term incentives and/or sales compensation)
Company Overview