Cybersecurity Engineer (Clearance Required)

LMI Consulting, LLC; United States; Remote; USD 130,000 - 150,000; Full time

Job summary

LMI is seeking a Cybersecurity Engineer to support an Army program modernizing platform infrastructure with secure, scalable, cloud-enabled systems. This role advises ISSM, System Owners, and engineering teams; maintains authorization artifacts and remediation plans; and integrates security into cloud operations and Agile delivery.

The ideal candidate has 5+ years in cybersecurity engineering, DoD cloud security experience, and DoDI 8140 qualification.

Qualifications

• Active Secret clearance required.
• Bachelor's degree in CS/IS/Cybersecurity or related field.
• 5+ years in cybersecurity engineering, information assurance, RMF, or secure systems ops.
• Active DoDI 8140 qualification.
• Strong DoD cloud security knowledge (AWS GovCloud, Azure IL5/IL6, Zero Trust).
• Experience developing or maintaining RMF artifacts and managing POA&M in eMASS or similar workflow.
• Experience with cloud security operations, vulnerability management, or security monitoring (AWS or other cloud).
• Familiarity with Agile, DevSecOps, and secure SDLC.
• Clear communication with stakeholders to resolve findings and deadlines.

Responsibilities

• Maintain the RMF authorization package in eMASS.
• Prepare and maintain RMF artifacts (SSP, SAR, Continuous Monitoring Strategy).
• Update POA&Ms in eMASS and internal workflows.
• Coordinate remediation timelines with System Owners, Cloud Architects, and Engineers.
• Review noncompliance closures and remediation evidence for approvals.
• Assess impact of cybersecurity tasks on AWS architecture and cloud boundaries.
• Review STIGs and security guides using STIG Viewer and automation tools.
• Integrate vulnerability analysis and secure configurations into GitLab CI/CD and Agile workflows.
• Support continuous monitoring and vulnerability scanning (ACAS, etc.).
• Maintain cybersecurity dashboards and track POA&M aging and incident responses.

Skills

Active Secret clearance

Defense cybersecurity

Communication with stakeholders

Education

Bachelor's degree in Computer Science/Information Systems/Cybersecurity

Tools

AWS GovCloud

Azure IL5/IL6

RMF/eMASS

NIST SP 800-53

STIG Viewer

ACAS

GitLab CI/CD

Power BI

Job description

Cybersecurity Engineer (Clearance Required)

LMI is seeking a Cybersecurity Engineer to support an Army program modernizing platform infrastructure through secure, scalable, and cloud-enabled systems. This role serves as a cybersecurity advisor to the Information System Security Manager, System Owners, and technical engineering teams. The engineer maintains authorization artifacts, coordinates remediation, and helps integrate security into cloud operations and Agile delivery.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Responsibilities

• Maintain the system security authorization package in the Enterprise Mission Assurance Support Service (eMASS).
• Prepare and maintain Risk Management Framework artifacts, including the System Security Plan, Security Assessment Report, Continuous Monitoring Strategy, and supporting control evidence.
• Curate and validate evidence for the transition from NIST SP 800-53 Revision 4 to Revision 5 and for ongoing security control implementation.
• Create, track, and update Plans of Action and Milestones in eMASS and internal ticketing workflows.
• Work with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource needs.
• Review noncompliance closures and remediation evidence before submission for ISSM and Authorizing Official approval.
• Assess the technical and operational impact of directed cybersecurity tasks on cARMY AWS architecture, workloads, and cloud boundaries.
• Conduct and review DISA Security Technical Implementation Guides and Security Requirements Guides using STIG Viewer and automated compliance tools.
• Integrate vulnerability analysis, secure configuration validation, and related DevSecOps activities into GitLab CI/CD and Agile workflows.
• Support continuous monitoring and vulnerability scanning through ACAS and related tools.
• Maintain cybersecurity dashboards and track POA&M aging, vulnerability trends, operational security tickets, incident responses, and change approvals.

Qualifications

Required qualifications

• Active Secret security clearance.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• 5 or more years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
• Active DoDI 8140 qualification.
• Strong understanding of DoD cloud security, including AWS GovCloud, Azure IL5 or IL6, Zero Trust, and hybrid architectures.
• Experience developing or maintaining RMF authorization artifacts and managing POA&M in eMASS or a comparable authorization workflow.
• Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements during system development or sustainment.
• Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
• Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.
• Clear communication skills and experience working with technical and program stakeholders to resolve findings and meet deadlines.

Preferred qualifications

• Experience supporting Army or DoD programs.
• Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
• Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
• Familiarity with SAFe or another Agile framework and incremental delivery cycles.

The target salary range for this position is $130,000-$150,000.

The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

Applicants must meet eligibility requirements for a U.S. Government security clearance. Only US Citizens are eligible for a security clearance. For this position, LMI will only consider applicants with security clearances or applicants who are eligible for security clearances, due to the nature of the work.

Job Locations

US-Remote

Equal Opportunity Employer

LMI is an Equal Opportunity Employer. LMI is committed to the fair treatment of all and to our policy of providing applicants and employees with equal employment opportunities. LMI recruits, hires, trains, and promotes people without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, disability, age, protected veteran status, citizenship status, genetic information, or any other characteristic protected by applicable federal, state, or local law.

If you are a person with a disability needing assistance with the application process, please contact [e-mail].

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.