Remote Cyber Security Engineer - DoD RMF & eMASS Lead

LMI Consulting, LLC; United States; Remote; USD 92,000 - 158,000; Full time

Job summary

LMI Consulting, LLC seeks a Cyber Security Engineer to own and coordinate cybersecurity compliance for an AWS-hosted Army application. This role manages vulnerability findings, security scanning, eMASS records, and RMF/ATO activities while collaborating with the ISSO and engineering teams.

The ideal candidate has hands-on experience with eMASS, RMF, and NIST SP 800-53, and holds an active DoD 8140 certification. A Secret clearance is required, with travel for coordination as needed.

Qualifications

• Active Secret clearance.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.
• Five or more years of cybersecurity engineering or information assurance experience.
• Hands-on experience with eMASS, RMF, NIST SP 800-53, POA&Ms, and ATO support; understanding of STIG assessment and inherited controls.
• Experience coordinating vulnerability scanning, CVE remediation, and compliance activities with an ISSO and technical teams.
• Technical understanding of Linux, AWS security, containers, and vulnerability assessment tools.
• Active cybersecurity certification accepted for the assigned DoD 8140 work role and proficiency level.

Responsibilities

• Own the cyber compliance backlog, priorities, reporting, and coordination with the ISSO and government security stakeholders.
• Coordinate security scans, including ACAS, application, dependency, and container scanning; review results and validate findings.
• Triage CVEs and other vulnerabilities, assess applicability and risk, assign remediation owners, track due dates, and verify closure through rescanning or technical evidence.
• Maintain eMASS records, RMF artifacts, control evidence, POA&Ms, and continuous monitoring documentation to support ATO attainment and sustainment.
• Coordinate control evidence, inherited controls, assessment responses, and compliance milestones with the ISSO, engineering team, and platform or image owners.
• Provide technical guidance on secure configurations, patching, access controls, and vulnerability remediation across Linux, container, and AWS environments.
• Assess release security impacts, communicate residual risks and blockers, and integrate cyber requirements into agile planning and delivery.

Skills

Security compliance

RMF

NIST SP 800-53

Vulnerability management

ACAS/Tenable

AWS security

Linux

Container security

DoD 8140

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field

Tools

eMASS

ACAS

Jira

GitLab

Job description

LMI Consulting, LLC seeks a Cyber Security Engineer to own and coordinate cybersecurity compliance for an AWS-hosted Army application. This role manages vulnerability findings, security scanning, eMASS records, and RMF/ATO activities while collaborating with the ISSO and engineering teams.

The ideal candidate has hands-on experience with eMASS, RMF, and NIST SP 800-53, and holds an active DoD 8140 certification. A Secret clearance is required, with travel for coordination as needed.