Information System Security Officer; ISSO

LMI is seeking an Information System Security Officer (ISSO) to support the Robotics and Autonomous Systems (RAS) business unit and Department of War mission partners. The ISSO will maintain system security documentation, coordinate Risk Management Framework (RMF) activities, support Authority to Operate (ATO) packages, and track security controls, vulnerabilities, and remediation actions throughout the system lifecycle.

The ISSO will work with the Information System Security Manager (ISSM), government system owners, assessors, and engineering teams to keep authorization records aligned with deployed systems. The ideal candidate combines hands‑on DoD authorization experience with the technical judgment to evaluate evidence, identify security gaps, and coordinate corrective actions.

This remote position requires an active Secret security clearance and the ability to obtain and maintain Top Secret if required by the assignment. Periodic travel may be required for assessments, customer meetings, and access to approved facilities. All classified work must be performed in approved facilities.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors, helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

• Maintain System Security Plans, control implementation statements, system inventories, authorization boundaries, network and data-flow diagrams, and supporting records in eMASS or another customer-approved system.
• Support system categorization, control selection, and documentation of inherited and system-specific controls, including shared responsibilities across cloud providers, platform teams, and application owners.
• Prepare and maintain authorization packages for initial authorization, renewal, and system changes; coordinate evidence collection, reviews, assessment milestones, and responses to findings.
• Maintain Plans of Action and Milestones (POA&Ms), assign and track remediation actions with responsible teams, and document validation and closure evidence.
• Review vulnerability scans, Security Technical Implementation Guide (STIG) checklists, and security advisories; coordinate remediation and document unresolved risks for appropriate review.
• Execute the approved continuous monitoring plan, coordinating control reviews, scan schedules, account reviews, audit-log reviews, configuration checks, and required reporting.
• Evaluate proposed changes to applications, infrastructure, interfaces, and data flows for security impacts; update documentation and coordinate any additional assessment or authorization requirements.
• Work with cloud, platform, software, and cybersecurity engineers to collect technical evidence from deployed systems and software delivery pipelines, including configuration and vulnerability results.
• Support security assessments, inspections, and audits by organizing evidence, responding to assessor questions, and tracking corrective actions through resolution.
• Maintain security procedures and support access-control reviews, incident reporting, contingency planning, and recovery exercises in…