Cybersecurity Engineer - Clearance Required
Logistics Management Institute3 days ago
Remote, United StatesSenior
Base Salary
$111k - $200k/yr
Responsibilities
- Lead RMF activities for the LIGER deployment, including categorization, control selection and tailoring, implementation, assessment, and continuous monitoring.
- Own and maintain ATO artifacts such as SSP, SAP, SAR, POA&M, and supporting DHS-aligned documentation.
- Coordinate with ISSOs, Authorizing Officials, and cyber working groups on ATO and continuous authorization activities.
- Translate NIST 800-53 controls into actionable engineering requirements.
- Run and review vulnerability scans across CI/CD pipelines and runtime environments, triage findings, and drive remediation.
- Validate CIS Benchmarks and DISA STIG hardening baselines on containers, hosts, and cloud resources.
- Partner with platform engineers on AWS GovCloud security, including IAM, network controls, secrets management, logging, and runtime protection.
- Develop security policies, procedures, and SOPs for LIGER on customer infrastructure.
- Track audit findings, remediation actions, and POA&M items through closure.
- Support FedRAMP-aligned control implementation and inheritance.
- Advise leadership on system risk, control effectiveness, and AI/LLM security considerations in federal environments.
Requirements
- Active TS/SCI security clearance.
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field.
- At least 5 years of experience designing, implementing, and monitoring cybersecurity solutions in federal environments.
- At least 5 years of hands-on RMF experience, including ATO development and continuous monitoring against NIST 800-53.
- CISSP, CISM, or equivalent senior-level cybersecurity certification.
- Experience securing LLM, GenAI, or agentic AI systems, including data handling, prompt and tool-call risk, and model output controls.
- Strong AWS cloud-security experience, preferably in GovCloud or similar high-compliance environments.
- Experience with vulnerability scanning, triage, remediation tracking, and reporting.
- Experience hardening systems with CIS Benchmarks or DISA STIGs.
- Familiarity with secrets management, access control, auditability, and CI/CD pipeline security.
- Strong written communication skills for producing ATO artifacts suitable for assessor and Authorizing Official review.
- Ability to translate compliance requirements into engineering work and collaborate with developers.
- Preferred qualifications include DHS ATO or continuous authorization experience, DHS 4300A familiarity, FedRAMP Moderate or High experience, Kubernetes and container security, GitLab pipeline security scanning, Tenable, Xacta, OpenRMF, CISA directives, CDM, or HVA program experience.
Benefits
- Remote position located in the United States.
- Work supports federal missions across defense, space, healthcare, and energy sectors.
- Target base salary range is $111,427-$200,000.
Tech Stack
Categories
About Logistics Management Institute
Logistics Management Institute (LMI) provides consulting, software development, and analytics services to U.S. federal agencies, with strengths in supply chain, digital engineering, AI, and modeling and simulation. It builds and sustains government systems—such as Army acquisition and contract-writing platforms—while delivering data-driven modernization and program support across defense, space, healthcare, and energy. Founded in 1961 and headquartered in Tysons, Virginia, LMI operates as a privately held contractor to the public sector.