Remote Cyber Security Engineer - RMF/ATO Lead

LMI; United States; Remote; USD 92,000 - 158,000; Full time

Job summary

LMI seeks a Cyber Security Engineer to own cybersecurity compliance for an AWS-hosted Army application, managing vulnerability findings, security scans, eMASS records, and RMF/ATO activities with the ISSO and engineering teams.

Drive remediation, guide secure configurations across Linux, containers, and AWS, and communicate cyber risk to technical and government stakeholders. Requires Secret clearance and DoD 8140 readiness, with US citizenship.

Qualifications

• Active Secret security clearance.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.
• Five or more years of cybersecurity engineering or information assurance experience.
• Hands-on experience with eMASS, RMF, NIST SP 800-53, POA&Ms, and ATO support. Understanding of the STIG assessment process and inherited security controls.
• Experience coordinating vulnerability scanning, CVE remediation, and compliance activities with an ISSO and technical teams.
• Technical understanding of Linux, AWS security, containers, and vulnerability assessment tools.
• Active cybersecurity certification accepted for the assigned DoD 8140 work role and proficiency level.

Responsibilities

• Own the cyber compliance backlog, priorities, reporting, and coordination with the ISSO and government security stakeholders.
• Coordinate security scans, including ACAS, application, dependency, and container scanning; review results and validate findings.
• Triage CVEs and other vulnerabilities, assess applicability and risk, assign remediation owners, track due dates, and verify closure through rescanning or technical evidence.
• Maintain eMASS records, RMF artifacts, control evidence, POA&Ms, and continuous monitoring documentation to support ATO attainment and sustainment.
• Coordinate control evidence, inherited controls, assessment responses, and compliance milestones with the ISSO, engineering team, and platform or image owners.
• Provide technical guidance on secure configurations, patching, access controls, and vulnerability remediation across Linux, container, and AWS environments.
• Assess release security impacts, communicate residual risks and blockers, and integrate cyber requirements into agile planning and delivery.

Skills

Vulnerability remediation

Security scanning coordination

RMF/DoD 8140 knowledge

Linux and AWS security

Communication with government

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering

Tools

eMASS

RMF

ACAS

Tenable

GitLab

Jira

POA&Ms

Job description

LMI seeks a Cyber Security Engineer to own cybersecurity compliance for an AWS-hosted Army application, managing vulnerability findings, security scans, eMASS records, and RMF/ATO activities with the ISSO and engineering teams.

Drive remediation, guide secure configurations across Linux, containers, and AWS, and communicate cyber risk to technical and government stakeholders. Requires Secret clearance and DoD 8140 readiness, with US citizenship.