Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
8+ years in mobile security or enterprise security architecture.
In-depth knowledge of iOS and Android mobile operating systems.
Familiarity with federal cybersecurity frameworks like NIST and Executive Order 14028.
Experience with mobile endpoint security and remote device management.
Responsibilities
Develop and implement mobile security strategies aligned with federal standards.
Act as a technical advisor on secure mobile device usage and threat defense.
Design secure architectures for mobile deployments, including encryption and remote wipe.
Evaluate and configure MDM and EMM solutions like Microsoft Intune and VMware Workspace ONE.
Analyze mobile security vulnerabilities and lead incident response strategies.
Conduct security reviews of mobile applications and configurations.
Integrate mobile device telemetry into continuous monitoring platforms.
Benefits
Comprehensive health, dental, and vision insurance.
401(k) plan with company match.
Generous paid time off and holiday schedule.
Professional development and training opportunities.
Flexible work arrangements and remote work options.
Full Job Description
Senior Information Systems Security Engineer (Mobile Device Security SME) to work on-site in support of a government contract for a client located in Washington, DC. An active TS/SCI clearance is required.
Responsibilities
Develops and implements enterprise-level mobile security strategies and policies aligned with organizational objectives and federal standards, including NIST SP 800-124, NIST SP 800-53, and FIPS.
Serves as a key technical advisor on secure mobile device usage, mobile application vetting, and mobile threat defense.
Designs and validates secure architectures for mobile device deployments, including containerization, encryption, remote wipe, and endpoint protection.
Evaluates and configures Mobile Device Management (MDM) and Enterprise Mobility Management (EMM) solutions such as Microsoft Intune, VMware Workspace ONE, and MobileIron.
Analyzes and assesses mobile security vulnerabilities, threats, and exploits.
Leads response and remediation strategies for mobile-related security incidents.
Conducts security reviews of mobile applications, operating system configurations, Bluetooth/NFC settings, and mobile communications protocols.
Ensures mobile device deployments comply with Zero Trust Architecture (ZTA), Executive Order 14028, FedRAMP, Risk Management Framework (RMF), and organizational mobile use policies.
Integrates mobile device telemetry and security logs into continuous monitoring platforms, including SIEM and endpoint analytics solutions, to maintain ongoing risk visibility.
Provides technical training and guidance to Information System Security Officers (ISSOs), system owners, and end users on secure mobile device practices.
Participates in cybersecurity governance meetings and contributes mobile security expertise to enterprise risk management decisions.
Collaborates with IT, Governance, Risk, and Compliance (GRC), and Security Engineering teams to enable secure mobile access for remote work, Bring Your Own Device (BYOD), and sensitive enterprise systems.
Leads or supports mobile security projects, including pilot programs, deployments, audits, technology rollouts, and modernization initiatives.
Required Skills and Qualifications
TS/SCI security clearance.
Bachelor's degree from an accredited college or university in Cybersecurity, Information Technology, Computer Science, or a related field.
8+ years of experience in mobile security, enterprise security architecture, or a cybersecurity-focused Subject Matter Expert (SME) role.
Deep understanding of mobile operating systems, including iOS and Android, MDM/EMM platforms, and mobile network protocols.
Knowledge of federal cybersecurity frameworks and policies, including NIST SP 800-124, NIST SP 800-53 Rev. 5, Executive Order 14028, and FISMA.
Experience with mobile endpoint security, secure communications, and remote device management.
Preferred Skills and Qualifications
Industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, CompTIA Security+, or CySA+.
Experience supporting federal government or highly regulated environments, including Intelligence Community (IC) or civilian agencies.
Familiarity with Zero Trust Architecture and mobile integration strategies.
Hands-on experience with vulnerability scanning tools used in mobile environments.
Working knowledge of mobile platform supply chain risks and application vetting processes.
GH 1072
Full-Time Employee Compensation
M9 Solutions' pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if any), or other law.
M9 Solutions is an IT consulting and staffing firm that provides services to clients in a variety of industries, including healthcare, finance, and government. The company offers a range of services, including project management, software development, and data analytics. M9 Solutions was founded in 2010 and is headquartered in Durham, North Carolina.
