Remote Cyber Security Engineer - RMF/ATO & eMASS

LMI Consulting, LLC; Tysons (VA); Remote; USD 92,000 - 158,000; Full time

Job summary

LMI is seeking a Cyber Security Engineer to own and coordinate cybersecurity compliance for an AWS-hosted Army application. This role manages vulnerability findings, eMASS records, RMF/ATO activities, and works with the ISSO and engineering team to drive remediation.

The ideal candidate holds an active Secret clearance with strong Linux/AWS security knowledge and vulnerability scanning experience; remote work with occasional travel may be required.

Qualifications

• Active Secret clearance required.
• 5+ years of cybersecurity engineering or information assurance experience.
• Hands-on experience with eMASS, RMF, NIST SP 800-53, POA&Ms, and ATO support.
• Understanding of STIG assessment process and inherited Security Controls.
• Experience coordinating vulnerability scanning, CVE remediation, and compliance activities with ISSO and technical teams.
• Technical understanding of Linux, AWS security, containers, and vulnerability assessment tools.
• Active DoD 8140-related certification is preferred.

Responsibilities

• Own the cyber compliance backlog, priorities, reporting, and coordination with the ISSO and government security stakeholders.
• Coordinate security scans, including ACAS, application, dependency, and container scanning; review results and validate findings.
• Triage CVEs and vulnerabilities, assess risk, assign remediation owners, track due dates, and verify closure through rescanning or evidence.
• Maintain eMASS records, RMF artifacts, control evidence, POA&Ms, and continuous monitoring documentation for ATO attainment and sustainment.
• Coordinate control evidence, inherited controls, assessment responses, and milestones with the ISSO, engineering team, and platform or image owners.
• Provide technical guidance on secure configurations, patching, access controls, and remediation across Linux, container, and AWS environments.
• Assess release security impacts, communicate residual risks, and integrate cyber requirements into agile planning and delivery.

Skills

Security clearance

Vulnerability remediation

Linux

AWS security

Container security

Education

Bachelor's degree (Cybersecurity/CS/IS/Engineering)

Tools

eMASS

RMF

NIST SP 800-53

POA&Ms

ATO support

Job description

LMI is seeking a Cyber Security Engineer to own and coordinate cybersecurity compliance for an AWS-hosted Army application. This role manages vulnerability findings, eMASS records, RMF/ATO activities, and works with the ISSO and engineering team to drive remediation.

The ideal candidate holds an active Secret clearance with strong Linux/AWS security knowledge and vulnerability scanning experience; remote work with occasional travel may be required.