Senior Security & Compliance Engineer
Logistics Management Institute14 days ago
Arlington, VA, USAStaff+
Base Salary
$160k - $190k/yr
Responsibilities
- Lead security engineering and documentation for the platform’s Risk Management Framework and Authority to Operate activities.
- Maintain security baselines, control evidence, authorization documentation, and continuous monitoring processes.
- Map common-platform controls and identify application-specific controls required of third-party vendors.
- Assess third-party applications against security controls, deployment requirements, hosting standards, and vulnerability findings.
- Review evidence and test results, document gaps and remediation criteria, and provide technical recommendations to government personnel.
- Validate remediation evidence and integrate security checks, evidence collection, and monitoring into platform delivery and operations.
- Communicate security posture and unresolved risks to government and program leadership.
Requirements
- Bachelor’s degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience.
- At least eight years of experience in security engineering, cloud security, DevSecOps, or federal authorization.
- Demonstrated experience supporting DoD RMF and ATO activities and strong knowledge of NIST security controls and federal cybersecurity requirements.
- Experience securing cloud-hosted or enterprise application platforms and assessing third-party software against security controls and vulnerability findings.
- Hands-on software engineering or scripting experience for automating security validation, evidence collection, vulnerability checks, or monitoring.
- Ability to work with platform engineers, application teams, government personnel, and vendor representatives.
- Active Secret clearance or higher; U.S. citizenship is required for eligibility for a U.S. Government security clearance.
- Preferred qualifications include U.S. Army experience, AWS or secure government cloud experience, policy as code, automated evidence collection, continuous monitoring, container security, vulnerability management, identity, logging, cloud security tooling, and CISSP, Security+, or another relevant certification.
Benefits
- Job location is Arlington, Virginia.
- The position requires an active Secret clearance or higher and is limited to candidates eligible for a U.S. Government security clearance.
About Logistics Management Institute
Logistics Management Institute (LMI) provides consulting, software development, and analytics services to U.S. federal agencies, with strengths in supply chain, digital engineering, AI, and modeling and simulation. It builds and sustains government systems—such as Army acquisition and contract-writing platforms—while delivering data-driven modernization and program support across defense, space, healthcare, and energy. Founded in 1961 and headquartered in Tysons, Virginia, LMI operates as a privately held contractor to the public sector.