Note: The job is a remote job and is open to candidates in USA. Lumen is a trusted network provider connecting people, data, and applications through its fiber network and connected ecosystem. The Senior Information Security Engineer (Senior ISSO) supports federal customer security and compliance by executing RMF activities, maintaining authorization documentation, supporting assessments and audits, and helping manage the security posture of regulated systems.
Responsibilities
- Support execution of the full RMF lifecycle, including categorization, control implementation, assessment readiness, authorization support, and continuous monitoring
- Develop, maintain, and ensure accuracy of authorization artifacts (e.g., SSP, POA&M, control evidence, implementation narratives, and supporting documentation)
- Support activities necessary to maintain ATO compliance and audit readiness for assigned systems
- Assist with vulnerability management, audit response, corrective action plans, and remediation tracking activities
- Conduct security and compliance reviews to identify gaps, risks, and improvement opportunities
- Support system-level risk assessments and provide recommendations regarding control implementation and remediation activities
- Monitor vulnerability, audit, and continuous monitoring data to maintain awareness of system security posture
- Coordinate with engineering, operations, and program teams to support implementation of security controls and corrective actions
- Participate in security assessments, audits, and inspections, including interactions with assessors and customer stakeholders
- Review security documentation, control evidence, and implementation artifacts for accuracy and completeness
- Evaluate products, services, and proposed technical solutions for compliance, risk, and implementation considerations
- Support customer integration of managed services by assisting with control implementation, inheritance analysis, and security documentation activities
- Contribute RMF and compliance expertise to solution implementation, delivery efforts, and operational improvement initiatives
- Maintain awareness of evolving federal compliance requirements, security threats, and industry best practices
Skills
- Strong working knowledge of NIST RMF (SP 800-37) and NIST SP 800-53 control framework
- Demonstrated experience performing RMF activities and supporting authorization efforts for federal or regulated systems
- Experience supporting FedRAMP and/or FISMA authorization processes, including documentation development and assessment support
- Ability to execute assigned security and compliance activities with limited supervision
- Understanding of control implementation, inheritance concepts, and shared responsibility models
- Ability to assess security risks and communicate findings clearly to technical and non-technical stakeholders
- Experience evaluating security and compliance considerations associated with products, services, and architecture
- Working knowledge of cryptographic fundamentals and emerging security technologies, including post-quantum cryptography (PQC)
- Strong collaboration skills across engineering, operations, program management, and security teams
- Effective written and verbal communication skills
- Demonstrates Lumen leadership behaviors (teamwork, trust, transparency, clarity, courage, customer focus, growth mindset, respect)
- Bachelor's degree in information assurance, cybersecurity, or a related field, or equivalent experience
- Minimum of 3 years of relevant experience in information assurance, governance, risk, and compliance, or cybersecurity
- Demonstrated experience supporting RMF activities, security assessments, audits, or authorization efforts
- Experience developing or maintaining authorization artifacts (e.g., SSPs, POA&Ms, security plans, assessment evidence, or related documentation)
- Proficiency with technologies, tools, and processes supporting GRC, vulnerability management, and continuous monitoring
- US citizenship required
- The capability to meet the suitability requirements for a GSA public trust position is required
- Experience operating in customer-facing or services-based environments supporting federal or regulated clients is preferred
- Relevant certifications in cybersecurity or governance, risk, and compliance (e.g., Security+, CGRC, CAP, CISA) are preferred
- Broad security certifications (e.g., CISSP, CCSP, CISM) may supplement demonstrated experience
Benefits
- Remote position open to candidates based anywhere in the U.S.
- A comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing.
- Bonus structure including short-term incentives, long-term incentives and/or sales compensation.
Company Overview