Lead Information Security Engineer

Job Summary

Owning the development and maintenance of security authorization packages, the full-time remote Lead Information Security Engineer will manage RMF execution, ensure compliance with federal requirements, and drive remediation of vulnerabilities for assigned systems.

Key responsibilities

• Serve as the primary ISSO for assigned systems, ensuring successful ATO outcomes and RMF lifecycle execution
• Develop and maintain authorization artifacts and ensure systems remain ATO-compliant and audit-ready
• Coordinate with engineering and operations teams to implement effective security controls and support security assessments

Required qualifications

• Bachelor's degree in information assurance, cybersecurity, or a related field, or equivalent experience
• Minimum of 5 years of relevant experience in information assurance with responsibility for RMF execution and ATO support
• Proven experience developing and maintaining authorization artifacts and supporting security assessments
• Experience with FedRAMP and/or FISMA authorization processes
• Relevant certifications in governance, risk, and compliance (e.g., CGRC, CISA) are strongly preferred