Senior Information Systems Security Engineer (Mobile Device Security SME)

M9 Solutions is seeking a Senior Information Systems Security Engineer (Mobile Device Security SME) to work on-site in support of a government contract for a client located in Washington, DC. An active TS/SCI clearance is required.

Responsibilities

• Develops and implements enterprise-level mobile security strategies and policies aligned with organizational objectives and federal standards, including NIST SP 800-124, NIST SP 800-53, and FIPS.
• Serves as a key technical advisor on secure mobile device usage, mobile application vetting, and mobile threat defense.
• Designs and validates secure architectures for mobile device deployments, including containerization, encryption, remote wipe, and endpoint protection.
• Evaluates and configures Mobile Device Management (MDM) and Enterprise Mobility Management (EMM) solutions such as Microsoft Intune, VMware Workspace ONE, and MobileIron.
• Analyzes and assesses mobile security vulnerabilities, threats, and exploits.
• Leads response and remediation strategies for mobile-related security incidents.
• Conducts security reviews of mobile applications, operating system configurations, Bluetooth/NFC settings, and mobile communications protocols.
• Ensures mobile device deployments comply with Zero Trust Architecture (ZTA), Executive Order 14028, FedRAMP, Risk Management Framework (RMF), and organizational mobile use policies.
• Integrates mobile device telemetry and security logs into continuous monitoring platforms, including SIEM and endpoint analytics solutions, to maintain ongoing risk visibility.
• Provides technical training and guidance to Information System Security Officers (ISSOs), system owners, and end users on secure mobile device practices.
• Participates in cybersecurity governance meetings and contributes mobile security expertise to enterprise risk management decisions.
• Collaborates with IT, Governance, Risk, and Compliance (GRC), and Security Engineering teams to enable secure mobile access for remote work, Bring Your Own Device (BYOD), and sensitive enterprise systems.
• Leads or supports mobile security projects, including pilot programs, deployments, audits, technology rollouts, and modernization initiatives.

Required Skills and Qualifications

• TS/SCI security clearance.
• Bachelor's degree from an accredited college or university in Cybersecurity, Information Technology, Computer Science, or a related field.
• 8+ years of experience in mobile security, enterprise security architecture, or a cybersecurity-focused Subject Matter Expert (SME) role.
• Deep understanding of mobile operating systems, including iOS and Android, MDM/EMM platforms, and mobile network protocols.
• Knowledge of federal cybersecurity frameworks and policies, including NIST SP 800-124, NIST SP 800-53 Rev. 5, Executive Order 14028, and FISMA.
• Experience with mobile endpoint security, secure communications, and remote device management.

Preferred Skills and Qualifications

• Industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, CompTIA Security+, or CySA+.
• Experience supporting federal government or highly regulated environments, including Intelligence Community (IC) or civilian agencies.
• Familiarity with Zero Trust Architecture and mobile integration strategies.
• Hands-on experience with vulnerability scanning tools used in mobile environments.
• Working knowledge of mobile platform supply chain risks and application vetting processes.

GH 1072