Lead Information Security Engineer (ISSO with PQC) at Lumen. This remote position is open to candidates anywhere in the United States. You will own the development, maintenance, and defensibility of the security authorization package for assigned systems, ensuring RMF compliance and readiness for assessment. Apply RMF expertise across the full lifecycle—categorization, control implementation, assessment readiness, authorization support, and continuous monitoring—to achieve Authorization to Operate (ATO) outcomes and a strong security posture. The role may operate independently for smaller environments or align with a Senior Lead for larger programs. Responsibilities include serving as the primary ISSO for assigned systems, maintaining authorization artifacts (SSP, POA&M, control evidence), tracking vulnerabilities, and coordinating with engineering, operations, and program teams to implement controls effectively. You will support security assessments, audits, and inspections, evaluate products and architectures for compliance and risk, and assist in customer integration of managed services by defining control responsibilities and boundaries. Required knowledge includes NIST RMF (SP 800-37) and NIST SP 800-53, with experience in FedRAMP and/or FISMA, and familiarity with cryptographic principles and post-quantum cryptography (PQC). Qualifications include a bachelor’s degree in information assurance or cybersecurity (or equivalent experience), at least five years of information assurance experience, relevant governance, risk, and compliance certifications (e.g., CGRC, CISA),

Lead Information Security Engineer (ISSO with PQC) at Lumen. This remote position is open to candidates anywhere in the United States. You will own the development, maintenance, and defensibility of the security authorization package for assigned systems, ensuring RMF compliance and readiness for assessment. Apply RMF expertise across the full lifecycle—categorization, control implementation, assessment readiness, authorization support, and continuous monitoring—to achieve Authorization to Operate (ATO) outcomes and a strong security posture. The role may operate independently for smaller environments or align with a Senior Lead for larger programs. Responsibilities include serving as the primary ISSO for assigned systems, maintaining authorization artifacts (SSP, POA&M, control evidence), tracking vulnerabilities, and coordinating with engineering, operations, and program teams to implement controls effectively. You will support security assessments, audits, and inspections, evaluate products and architectures for compliance and risk, and assist in customer integration of managed services by defining control responsibilities and boundaries. Required knowledge includes NIST RMF (SP 800-37) and NIST SP 800-53, with experience in FedRAMP and/or FISMA, and familiarity with cryptographic principles and post-quantum cryptography (PQC). Qualifications include a bachelor’s degree in information assurance or cybersecurity (or equivalent experience), at least five years of information assurance experience, relevant governance, risk, and compliance certifications (e.g., CGRC, CISA),