Lead Information Security Engineer

$94,420 - $125,890/Yr

Lumen Technologies - Boston, MA

Full-time - Mid Level

Boston, MA

Telecommunications

About the position

The Lead Information Security Engineer plays a crucial role in the Industrial Security team at Lumen, focusing on cybersecurity compliance for government contracts. This position involves executing the Risk Management Framework (RMF) process, developing essential documentation, and ensuring adherence to security policies. The engineer will collaborate with program teams and government customers, addressing vulnerabilities and compliance issues while leading security assessments and audits.

Responsibilities

• Perform as an Information Systems Security Officer (ISSO) for government systems
• Achieve and maintain ATOs (Authority to Operate)
• Write System Security Plans (SSP), Plan of Actions & Milestones (POA&M), Continuous Monitoring Plans, Risk Assessments, Privacy Impact Analyses (PIA), and supporting documentation for systems subject to NIST SP 800-53
• Lead Security Assessment and Authorization processes and procedures
• Manage cybersecurity audits by federal departments/agencies, including third party auditors
• Develop and complete continuous monitoring reports and briefings
• Interface with appropriate government agencies, company management and employees, customers, vendors, and suppliers to ensure understanding of and compliance with security requirements
• Review vulnerability and compliance scan results (Nessus, Qualys, etc), work with team members to resolve vulnerabilities, and track ongoing vulnerability status and remediation
• Conduct periodic reviews to ensure compliance with established policies and procedures
• Investigate and document cybersecurity incidents, as well as provide protective and corrective measures in response to such incidents
• Report all cybersecurity incidents to the program Information Systems Security Managers (ISSM) through reports and briefings
• Participate in the change management process to ensure changes to software, hardware, and firmware do not adversely impact the security of an environment
• Develop, facilitate, and present information security awareness and security training on various customer and corporate security policies
• Recommend security best practices and system configuration standards

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, a related field, or equivalent experience
• Minimum of 6 years of relevant Security/Compliance Engineering experience
• Extensive experience in the administration, design and implementation of security controls including experience in applying methodologies and principles for all levels of security
• Exceptionally strong oral and written communication skills, collaboration skills, and experience in presenting technical issues to all levels of management, as well as non-technical staff
• Must possess current applicable professional/technical certifications, such as CISSP, GPEN, GWAPT, GISEC, CISM or CISA
• Experience with technologies, tools and process controls to minimize risk and data exposure
• Broad technical knowledge of current and emerging technologies used both within the corporate infrastructure and in delivering customer facing services
• US Citizenship required
• Suitability, Public Trust required
• Active TS Clearance preferred

Benefits

• Health insurance
• Life insurance
• Voluntary lifestyle benefits
• Short-term incentives or sales compensation
• Long-term incentive for Director and VP positions
• Comprehensive benefits package enhancing physical, mental, emotional, and financial wellbeing