Job Opportunities API

SMX is seeking a highly experienced Information Systems Security Engineer (ISSE) – Sr to support a mission-critical federal program in Washington, DC. This individual will serve as a senior cybersecurity and security engineering professional responsible for designing, implementing, assessing, and maintaining security controls that protect enterprise systems, applications, and infrastructure supporting critical mission operations. The selected candidate will function as a senior technical expert supporting multiple cybersecurity initiatives, authorization efforts, and security engineering activities. This role requires extensive experience in Risk Management Framework (RMF) implementation, security architecture, vulnerability management, security testing, and system authorization activities. The ideal candidate will possess strong technical leadership capabilities and the ability to evaluate security risks, develop mitigation strategies, and guide engineering teams in implementing effective security solutions. This position is on site in Washington, DC and requires an active TS/SCI clearance.   Essential Duties & Responsibilities: Lead security engineering activities supporting enterprise systems, applications, and infrastructure environments Design, implement, and assess security controls in accordance with federal cybersecurity requirements and industry best practices Develop, maintain, and review System Security Plans (SSPs), Business Impact Analyses (BIAs), Continuity of Operations Plans (COOPs), mitigation plans, and other security documentation Establish and maintain system authorization boundaries, security architectures, hardware inventories, software inventories, and access control documentation Create and maintain security assessment plans, test procedures, and security validation methodologies Conduct security testing, vulnerability assessments, control validation activities, and risk analyses Evaluate security findings and develop technical solutions to mitigate vulnerabilities and reduce organizational risk Support Authorization to Operate (ATO) activities, continuous monitoring programs, and compliance initiatives Analyze security alerts, vulnerabilities, system weaknesses, and emerging threats to determine operational impacts and remediation priorities Coordinate with system owners, developers, engineers, ISSOs, and government stakeholders to ensure security requirements are incorporated throughout the system lifecycle Support audit preparation, compliance assessments, and security reviews conducted by internal and external organizations Evaluate security architecture designs and recommend improvements to strengthen enterprise security posture Lead remediation efforts for identified vulnerabilities and security deficiencies Provide technical guidance and mentorship to junior security engineers and cybersecurity personnel Evaluate cybersecurity program performance and recommend improvements that enhance security effectiveness and operational efficiency Support major technology initiatives and modernization efforts by integrating security requirements throughout planning, design, implementation, and sustainment phases Required Skills & Experience Active TS/SCI clearance required Minimum of 8 years of professional experience supporting cybersecurity, security engineering, information assurance, or related disciplines Demonstrated experience serving as a senior security engineer, lead cybersecurity practitioner, or technical security subject matter expert Extensive experience implementing and assessing security controls in accordance with NIST and federal cybersecurity requirements Experience supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processes Experience developing and maintaining SSPs, POA&Ms, Security Assessment Plans, authorization boundary diagrams, and related security a