Security & Compliance Engineer — RMF & Gov Cloud Expert

LMI; Arlington (VA); Vor Ort; USD 160.000 - 190.000; Vollzeit

Zusammenfassung

LMI is seeking a Staff Security & Compliance Engineer to secure a common platform for onboarding, deploying, and hosting third-party applications in support of HQDA G-4. This engineer will support the platform’s authorization, maintain its security controls, and assess whether applications meet prescribed controls and hosting standards before deployment and during operations.

This is a hands-on role for an engineer who can turn security requirements into automated checks, clear findings, and

Qualifikationen

• Bachelor’s degree in cybersecurity, CS, engineering, or related field, or equivalent experience.
• 8+ years in security engineering, cloud security, DevSecOps, or federal authorization.
• Experience supporting DoD RMF and ATO activities.
• Strong knowledge of NIST security controls and federal cybersecurity requirements.
• Experience securing cloud-hosted or enterprise application platforms.
• Experience assessing third-party software against security controls, deployment requirements, and vulnerability findings.
• Hands-on software engineering or scripting to automate security validation, evidence collection, vulnerabilities, or monitoring.
• Ability to work with platform engineers, government personnel, and vendor representatives.
• Active Secret clearance.

Aufgaben

• Lead security engineering and documentation supporting RMF and ATO activities.
• Maintain platform security baseline, control evidence, authorization documentation, and continuous monitoring approach.
• Map controls provided by the common platform and identify the application-specific controls each third-party vendor must satisfy.
• Assess third-party applications against prescribed security controls and deployment and hosting standards.
• Review security evidence, test results, and vulnerability findings; document gaps, risk, and criteria for remediation.
• Provide government personnel with clear findings and technical recommendations so they can coordinate remediation with third-party vendors. Validate remediation evidence before deployment or continued hosting.
• Integrate security checks, evidence collection, and monitoring into platform delivery and operations where practical.
• Communicate security posture and unresolved risks to government and program leadership.

Kenntnisse

NIST security controls

DevSecOps

DoD RMF/ATO

Cloud security

Automation/scripting

Ausbildung

Bachelor’s degree in cybersecurity, CS, engineering, or related field

Tools

AWS

Policy as code

Container security tooling

Vulnerability management tooling

Jobbeschreibung

LMI is seeking a Staff Security & Compliance Engineer to secure a common platform for onboarding, deploying, and hosting third-party applications in support of HQDA G-4. This engineer will support the platform’s authorization, maintain its security controls, and assess whether applications meet prescribed controls and hosting standards before deployment and during operations.

This is a hands-on role for an engineer who can turn security requirements into automated checks, clear findings, and