Cybersecurity Engineer (Clearance Required)

LMI•Remote,

8d•$130,000 - $150,000•Remote

About The Position

LMI is seeking a Cybersecurity Engineer to support an Army program modernizing platform infrastructure through secure, scalable, and cloud-enabled systems. The role serves as a cybersecurity advisor to the Information System Security Manager, System Owners, and technical engineering teams. The engineer maintains authorization artifacts, coordinates remediation, and helps integrate security into cloud operations and Agile delivery. LMI is a digital solutions provider focused on accelerating government impact through innovation and speed. The company invests in technology and prototypes and brings commercial-grade platforms and mission-ready AI to federal agencies. LMI serves the defense, space, healthcare, and energy sectors, and is headquartered in Tysons, Virginia. The position is remote and supports cybersecurity engineering for an Army program, including RMF authorization package maintenance, risk and vulnerability remediation, cloud security operations, continuous monitoring, and security integration in DevSecOps and Agile workflows.

Requirements

Active Secret security clearance.
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
5 or more years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
Active DoDI 8140 qualification.
Strong understanding of DoD cloud security, including AWS GovCloud, Azure IL5 or IL6, Zero Trust, and hybrid architectures.
Experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements during system development or sustainment.
Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.
Clear communication skills and experience working with technical and program stakeholders to resolve findings and meet deadlines.

Nice To Haves

Experience supporting Army or DoD programs.
Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
Familiarity with SAFe or another Agile framework and incremental delivery cycles.

Responsibilities

Maintain the system security authorization package in the Enterprise Mission Assurance Support Service (eMASS).
Prepare and maintain Risk Management Framework artifacts, including the System Security Plan, Security Assessment Report, Continuous Monitoring Strategy, and supporting control evidence.
Curate and validate evidence for the transition from NIST SP 800-53 Revision 4 to Revision 5 and for ongoing security control implementation.
Create, track, and update Plans of Action and Milestones in eMASS and internal ticketing workflows.
Work with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource needs.
Review noncompliance closures and remediation evidence before submission for ISSM and Authorizing Official approval.
Assess the technical and operational impact of directed cybersecurity tasks on cARMY AWS architecture, workloads, and cloud boundaries.
Conduct and review DISA Security Technical Implementation Guides and Security Requirements Guides using STIG Viewer and automated compliance tools.
Integrate vulnerability analysis, secure configuration validation, and related DevSecOps activities into GitLab CI/CD and Agile workflows.
Support continuous monitoring and vulnerability scanning through ACAS and related tools.
Maintain cybersecurity dashboards and track POA&M aging, vulnerability trends, operational security tickets, incident responses, and change approvals.