Information Systems Security Engineer

M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations that desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions, Data Delivery & Analytics, Cyber Security, Cloud Migration, Applications and Infrastructure, Software Development, and Finance & Accounting.

M9 Solutions is seeking a Senior Information Systems Security Engineer (Mobile Device Security SME) to work on-site in support of a government contract for a client located in Washington, DC. An active TS/SCI clearance is required.

Responsibilities

• Develops and implements enterprise-level mobile security strategies and policies aligned with organizational objectives and federal standards, including NIST SP 800-124, NIST SP 800-53, and FIPS.
• Serves as a key technical advisor on secure mobile device usage, mobile application vetting, and mobile threat defense.
• Designs and validates secure architectures for mobile device deployments, including containerization, encryption, remote wipe, and endpoint protection.
• Evaluates and configures Mobile Device Management (MDM) and Enterprise Mobility Management (EMM) solutions such as Microsoft Intune, VMware Workspace ONE, and MobileIron.
• Analyzes and assesses mobile security vulnerabilities, threats, and exploits.
• Leads response and remediation strategies for mobile-related security incidents.
• Conducts security reviews of mobile applications, operating system configurations, Bluetooth/NFC settings, and mobile communications protocols.
• Ensures mobile device deployments comply with Zero Trust Architecture (ZTA), Executive Order 14028, FedRAMP, Risk Management Framework (RMF), and organizational mobile use policies.
• Integrates mobile device telemetry and security logs into continuous monitoring platforms, including SIEM and endpoint analytics solutions, to maintain ongoing risk visibility.
• Provides technical training and guidance to Information System Security Officers (ISSOs), system owners, and end users on secure mobile device practices.
• Participates in cybersecurity governance meetings and contributes mobile security expertise to enterprise risk management decisions.
• Collaborates with IT, Governance, Risk, and Compliance (GRC), and Security Engineering teams to enable secure mobile access for remote work, Bring Your Own Device (BYOD), and sensitive enterprise systems.