SMX is seeking a highly experienced Information Systems Security Engineer (ISSE) – Sr to support a mission-critical federal program in Washington, DC. This individual will serve as a senior cybersecurity and security engineering professional responsible for designing, implementing, assessing, and maintaining security controls that protect enterprise systems, applications, and infrastructure supporting critical mission operations. The selected candidate will function as a senior technical expert supporting multiple cybersecurity initiatives, authorization efforts, and security engineering activities. This role requires extensive experience in Risk Management Framework (RMF) implementation, security architecture, vulnerability management, security testing, and system authorization activities. The ideal candidate will possess strong technical leadership capabilities and the ability to evaluate security risks, develop mitigation strategies, and guide engineering teams in implementing effective security solutions. This position is on site in Washington, DC and requires an active TS/SCI clearance.  

Essential Duties & Responsibilities:

• Lead security engineering activities supporting enterprise systems, applications, and infrastructure environments
• Design, implement, and assess security controls in accordance with federal cybersecurity requirements and industry best practices
• Develop, maintain, and review System Security Plans (SSPs), Business Impact Analyses (BIAs), Continuity of Operations Plans (COOPs), mitigation plans, and other security documentation
• Establish and maintain system authorization boundaries, security architectures, hardware inventories, software inventories, and access control documentation
• Create and maintain security assessment plans, test procedures, and security validation methodologies
• Conduct security testing, vulnerability assessments, control validation activities, and risk analyses
• Evaluate security findings and develop technical solutions to mitigate vulnerabilities and reduce organizational risk
• Support Authorization to Operate (ATO) activities, continuous monitoring programs, and compliance initiatives
• Analyze security alerts, vulnerabilities, system weaknesses, and emerging threats to determine operational impacts and remediation priorities
• Coordinate with system owners, developers, engineers, ISSOs, and government stakeholders to ensure security requirements are incorporated throughout the system lifecycle
• Support audit preparation, compliance assessments, and security reviews conducted by internal and external organizations
• Evaluate security architecture designs and recommend improvements to strengthen enterprise security posture
• Lead remediation efforts for identified vulnerabilities and security deficiencies
• Provide technical guidance and mentorship to junior security engineers and cybersecurity personnel
• Evaluate cybersecurity program performance and recommend improvements that enhance security effectiveness and operational efficiency
• Support major technology initiatives and modernization efforts by integrating security requirements throughout planning, design, implementation, and sustainment phases

Required Skills & Experience

• Active TS/SCI clearance required
• Minimum of 8 years of professional experience supporting cybersecurity, security engineering, information assurance, or related disciplines
• Demonstrated experience serving as a senior security engineer, lead cybersecurity practitioner, or technical security subject matter expert
• Extensive experience implementing and assessing security controls in accordance with NIST and federal cybersecurity requirements
• Experience supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processes
• Experience developing and maintaining SSPs, POA&Ms, Security Assessment Plans, authorization boundary diagrams, and related security artifacts
• Experience conducting vulnerability assessments, security testing, control validation, and risk assessment activities
• Experience evaluating system architectures, security configurations, and technical implementations for compliance and security effectiveness
• Strong understanding of NIST 800-53, NIST 800-37, continuous monitoring, and federal cybersecurity standards
• Experience supporting enterprise security programs within complex technology environments
• Experience analyzing security findings and developing risk-based mitigation strategies
• Strong analytical, troubleshooting, and problem-solving skills
• Ability to communicate complex security concepts to technical and non-technical audiences
• Strong written and verbal communication skills
• Ability to work independently while managing multiple priorities and technical initiatives

Desired Skills & Experience 

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or related field
• Advanced degree preferred
• Experience supporting federal government, law enforcement, intelligence community, or national security programs
• Experience supporting cloud security architectures and cloud-based authorization efforts
• Experience supporting Governance, Risk, and Compliance (GRC) platforms and security automation initiatives
• Familiarity with enterprise security tools including:
• Splunk
• Tenable Nessus
• Security Center
• Endpoint Detection and Response (EDR) Platforms
• Vulnerability Management Platforms
• Security Information and Event Management (SIEM) Tools
• Experience supporting Zero Trust initiatives and cybersecurity modernization efforts
• Experience supporting Agile, SAFe, and DevSecOps environments
• One or more of the following certifications preferred:
• CISSP
• CAP (Certified Authorization Professional)
• CASP+
• CISM
• CCSP
• Security+
• GSEC
• Other relevant cybersecurity certifications
• Experience supervising, mentoring, or leading cybersecurity teams preferred

Application Deadline:  9-4-2026

# LI-SA1