Senior Security & Compliance Engineer

LMI • Arlington, VA

25d • $160,000 - $190,000

About The Position

LMI is seeking a Staff Security & Compliance Engineer to secure a common platform for onboarding, deploying, and hosting third-party applications in support of HQDA G-4. The engineer will support the platform’s authorization, maintain its security controls, and assess whether applications meet prescribed controls and hosting standards before deployment and during operations. This hands-on role turns security requirements into automated checks, clear findings, and actionable evidence for government decisions.

LMI is a digital solutions provider focused on accelerating government impact through innovation and speed. It develops commercial-grade platforms and mission-ready AI for federal agencies and serves the defense, space, healthcare, and energy sectors. LMI is headquartered in Tysons, Virginia.

The position is located in Arlington, Virginia. The target salary range is $160,000–$190,000. Applicants must be U.S. citizens eligible for a government security clearance; LMI will consider applicants with an active Secret clearance or higher.

Requirements

• Bachelor’s degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience.
• Eight or more years of experience in security engineering, cloud security, DevSecOps, or federal authorization.
• Demonstrated experience supporting DoD RMF and ATO activities.
• Strong knowledge of NIST security controls and federal cybersecurity requirements.
• Experience securing cloud-hosted or enterprise application platforms.
• Experience assessing third-party software against security controls, deployment requirements, and vulnerability findings.
• Hands-on software engineering or scripting experience used to automate security control validation, evidence collection, vulnerability checks, or monitoring.
• Ability to work directly with platform engineers, application teams, government personnel, and vendor representatives.
• Active Secret clearance or higher.
• U.S. citizenship and eligibility for a U.S. Government security clearance.

Nice To Haves

• Experience supporting the U.S. Army.
• Experience with AWS or another secure government cloud environment.
• Familiarity with policy as code, automated evidence collection, and continuous monitoring.
• Experience with container security, vulnerability management, identity, logging, or cloud security tooling.
• CISSP, Security+, or another relevant cybersecurity certification.

Responsibilities

• Lead security engineering and documentation supporting the platform’s Risk Management Framework and Authority to Operate activities.
• Maintain the platform security baseline, control evidence, authorization documentation, and continuous monitoring approach.
• Map controls provided by the common platform and identify application-specific controls that third-party vendors must satisfy.
• Assess third-party applications against prescribed security controls and deployment and hosting standards.
• Review security evidence, test results, and vulnerability findings; document gaps, risks, and remediation criteria.
• Provide government personnel with clear findings and technical recommendations to support remediation coordination with third-party vendors.
• Validate remediation evidence before deployment or continued hosting.
• Integrate security checks, evidence collection, and monitoring into platform delivery and operations where practical.
• Communicate security posture and unresolved risks to government and program leadership.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior