Cybersecurity Engineer, Clearance Required
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cybersecurity Engineer securing Army cloud infrastructure and maintaining RMF authorization artifacts for LMI, a federal digital solutions provider. Integrating DoD controls, vulnerability management, and DevSecOps workflows.
Responsibilities:
- Support an Army program modernizing platform infrastructure through secure, scalable, cloud-enabled systems
- Serve as a cybersecurity advisor to the Information System Security Manager, System Owners, and technical engineering teams
- Maintain the system security authorization package in eMASS
- Prepare and maintain RMF artifacts, including the System Security Plan, Security Assessment Report, Continuous Monitoring Strategy, and supporting control evidence
- Curate and validate evidence for NIST SP 800-53 Revision 4 to Revision 5 transition and ongoing security control implementation
- Create, track, and update POA&Ms in eMASS and internal ticketing workflows
- Work with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource needs
- Review noncompliance closures and remediation evidence before ISSM and Authorizing Official approval
- Assess the technical and operational impact of directed cybersecurity tasks on cARMY AWS architecture, workloads, and cloud boundaries
- Conduct and review DISA STIGs and Security Requirements Guides using STIG Viewer and automated compliance tools
- Integrate vulnerability analysis, secure configuration validation, and DevSecOps activities into GitLab CI/CD and Agile workflows
- Support continuous monitoring and vulnerability scanning through ACAS and related tools
- Maintain cybersecurity dashboards and track POA&M aging, vulnerability trends, operational security tickets, incident responses, and change approvals
Requirements:
- Active Secret security clearance
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field
- 5 or more years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations
- Active DoDI 8140 qualification
- Strong understanding of DoD cloud security, including AWS GovCloud, Azure IL5 or IL6, Zero Trust, and hybrid architectures
- Experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow
- Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements during system development or sustainment
- Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment
- Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning
- Clear communication skills and experience working with technical and program stakeholders to resolve findings and meet deadlines
- Experience supporting Army or DoD programs (preferred)
- Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD (preferred)
- Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines (preferred)
- Familiarity with SAFe or another Agile framework and incremental delivery cycles (preferred)
- Must be a U.S. citizen or eligible for a U.S. Government security clearance
Similar Jobs
Técnico Seguridad Perimetral
Administrador Oracle gestionando bases de datos corporativas para Logicalis Spain, empresa de centros de datos y soluciones tecnológicas. Instalación, migración, mantenimiento y soporte de entornos Oracle empresariales.
Técnico/a de Comunicaciones – Redes, Seguridad Perimetral, SD-WAN
Técnico de comunicaciones gestionando redes corporativas, seguridad perimetral y SD-WAN para The Whiteam Consulting. Integrando infraestructuras on-premise y cloud en proyectos tecnológicos.
Security Engineer II
Security Engineer securing information systems, data, and networks for a global organization. Conducting risk assessments, audits, incident investigations, and cybersecurity tool administration.
Senior Profesional Seguridad Física
Senior Physical Security Professional leading risk, security strategy, contracts, and public-force partnerships. PAR Servicios Integrales manages supplier services for the energy sector.
Senior Security Engineer
Senior Security Engineer building security foundations for Lumos’s autonomous identity platform. Designing authorization, threat modeling, cloud security, and vulnerability response for enterprise customers.
Senior Manager, Pre-Close Security
Senior cybersecurity deal lead assessing risks across Johnson & Johnson acquisitions, divestitures, and strategic transactions. Translating technical diligence into closing, Day 1, and post-close security decisions.
Senior Manager, Pre-Close Security
Senior cybersecurity deal lead guiding pre-close diligence for Johnson & Johnson healthcare transactions. Assessing cyber risks, advising deal decisions, and preparing Day 1 security handoffs.
Senior Security Engineer
Senior Security Engineer building Python-based automation, integrations, and AI/LLM workflows. Improving SOC operations for a software development client.
IT Cybersecurity Compliance Technical Associate – Campus 2027
Cybersecurity compliance associate supporting GRC workflows, risk assessments, control reviews, and audits at Guidehouse. Assisting U.S. business-hour escalations and compliance documentation.
Senior IT Security Engineer – Security Architecture, Operations
Senior IT Security Engineer developing security architecture and operations for Hypoport’s network of technology companies. Leading monitoring, incident response, tooling and automation.
Adjunct – IT/Cybersecurity
Adjunct instructor teaching IT and cybersecurity courses at Lackawanna College, a private Pennsylvania institution. Preparing course materials, supporting students, and reporting grades.
Cybersecurity Ops Analyst
Cybersecurity Ops Analyst monitoring and investigating threats for SAIC, a defense and mission technology integrator. Operating SIEM and EDR tools across a 24/7/365 security operations center.
Cybersecurity Operations Supervisor, 3rd Shift
Cybersecurity Operations Supervisor leading SAIC’s 24/7 enterprise security response team. Managing investigations, analysts, staffing, and continuous SOC improvements on third shift.
Security Architect
Security Architect designing and assuring secure systems for NEC Software Solutions. Supporting critical public-sector services through threat modelling, governance, and security architecture.
Senior Counsel – Data Governance, Privacy, Cybersecurity
Senior Counsel guiding Cencora’s healthcare services organization on data privacy, cybersecurity, AI, and governance. Advising on regulated health data, contracts, incident response, and technology-enabled offerings.
Adjunct Faculty, Cybersecurity for Leaders and Managers
Cybersecurity adjunct faculty teaching CSIA 300 asynchronously for University of Maryland Global Campus. Mentoring adult learners and supporting their academic and professional growth.
Adjunct Faculty – Microsoft 365 Endpoint Administration, Cybersecurity
Adjunct faculty teaching Microsoft 365 Endpoint Administration at UMGC, an online university serving nontraditional learners. Mentoring students through asynchronous, hands-on cybersecurity coursework.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security postures. Assessing Falcon environments, recommending remediation, and resolving customer issues.
Senior Director – Security Posture & Exposure Management
Senior security leader overseeing Lilly’s enterprise vulnerability management and exposure reduction. Leading teams, tooling, prioritization, remediation, and executive risk reporting for a global medicines company.
Infrastructure Security Vulnerability Engineer
Infrastructure Security Vulnerability Engineer reducing vulnerability risk across Avaya’s FedRAMP cloud environments. Coordinating remediation, compliance, reporting, and security improvements for federal-government operations.