Senior Security & Compliance Engineer
LMI Consulting · Arlington, VA, US
About this role
## Overview LMI is seeking a **Staff Security & Compliance Engineer** to secure a common platform for onboarding, deploying, and hosting third-party applications in support of **HQDA G-4**. You will support platform authorization, maintain security controls, and assess whether applications meet prescribed controls and hosting standards—both before deployment and during operations. This is a hands-on role for an engineer who can turn security requirements into **automated checks**, **clear findings**, and **actionable evidence** for government decisions. ## Responsibilities - Lead security engineering and documentation supporting the platform’s **Risk Management Framework (RMF)** and **Authority to Operate (ATO)** activities. - Maintain the platform security baseline, control evidence, authorization documentation, and **continuous monitoring** approach. - Map common platform controls and identify application-specific controls each third-party vendor must satisfy. - Assess third-party applications against prescribed security controls and deployment/hosting standards. - Review security evidence, test results, and vulnerability findings; document gaps, risk, and remediation criteria. - Provide government personnel with clear findings and technical recommendations to coordinate remediation with third-party vendors. - Validate remediation evidence before deployment or continued hosting. - Integrate security checks, evidence collection, and monitoring into platform delivery and operations where practical. - Communicate security posture and unresolved risks to government and program leadership. ## Qualifications **Minimum Qualifications** - Bachelor’s degree in cybersecurity, computer science, engineering, or related field, **or equivalent practical experience**. - **8+ years** experience in security engineering, cloud security, DevSecOps, or federal authorization. - Demonstrated experience supporting **DoD RMF and ATO** activities. - Strong knowledge of **NIST security controls** and federal cybersecurity requirements. - Experience securing cloud-hosted or enterprise application platforms. - Experience assessing third-party software against security controls, deployment requirements, and vulnerability findings. - Hands-on software engineering or scripting experience to automate security control validation, evidence collection, vulnerability checks, or monitoring. - Ability to work directly with platform engineers, application teams, government personnel, and vendor representatives. - **Active Secret clearance**. **Preferred Qualifications** - Experience supporting the **U.S. Army**. - Experience with **AWS** or another secure government cloud environment. - Familiarity with **policy as code**, automated evidence collection, and continuous monitoring. - Experience with container security, vulnerability management, identity, logging, or cloud security tooling. - **CISSP**, Security+, or another relevant cybersecurity certification. ## Compensation - **Target salary range:** $160,000 – $190,000 - Salary range shown is typical and not a guarantee; compensation depends on factors such as location, internal equity, contract requirements, and candidate qualifications (including clearance). ## Clearance & Eligibility - Applicants must meet eligibility requirements for a U.S. Government security clearance. - **Only U.S. citizens** are eligible. - LMI will consider applicants with an **active Secret clearance or higher**. ## Job Location - **US-V
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.