Overview
We're looking for a Cybersecurity Engineer to support the secure deployment and continuous authorization of IronSled, an enterprise Platform as a Service built for federal missions. You'll join a small, high-visibility team and own the security work that lets IronSled reach production, maintaining the ATO posture, driving vulnerability management, and partnering with cyber stakeholders to keep the platform compliant as it evolves.
This is hands-on cyber engineering, not paper compliance. You'll work alongside platform engineers, ISSOs, and the security team to harden deployments, validate controls, and resolve findings against real systems. If you want to do federal cybersecurity in an environment that ships fast and treats security as part of the product, keep reading.
IronSled is LMI's DevSecOps platform that serves as the central hub for all software development projects. IronSled allows internal and external users to set up development environments with just a few clicks.
LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.
Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors-helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.
Responsibilities
What You'll Do
Lead Risk Management Framework (RMF) activities for the LIGER deployment, including system categorization, control selection and tailoring, implementation, assessment, and continuous monitoring
Own and maintain authorization artifacts: System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and supporting documentation aligned to DHS requirements
Coordinate directly with ISSOs, Authorizing Officials, and cyber working groups to advance ATO and continuous authorization activities
Interpret NIST 800-53 controls in the context of the LIGER platform and translate them into actionable engineering requirements
Run and review vulnerability scans across CI/CD pipelines and runtime environments, triage findings, and drive remediation through the engineering team
Validate secure configurations and hardening baselines (e.g., CIS Benchmarks, DISA STIGs) on containers, hosts, and cloud resources
Partner with platform engineers on cloud and container security in AWS GovCloud, including IAM, network controls, secrets management, logging, and runtime protection
Develop and maintain security policies, procedures, and standard operating procedures (SOPs) specific to LIGER on customer infrastructure
Track audit findings, remediation actions, and POA&M items to closure
Support FedRAMP-aligned control implementation and inheritance where applicable
Advise senior LIGER and leadership on system risk levels, control effectiveness, and emerging compliance considerations for AI/LLM systems in federal environments
Qualifications
What We're Looking For
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
5+ years of experience designing, implementing, and monitoring cybersecurity solutions in federal environments
5+ years of hands-on RMF experience, including ATO development and continuous monitoring against NIST 800-53
CISSP, CISM, or equivalent senior-level cybersecurity certification
Experience securing LLM, GenAI, or agentic AI systems, including data handling, prompt and tool-call risk, and model output controls
Strong working knowledge of cloud security, particularly AWS, with experience in GovCloud or similar high-compliance environments
Experience with vulnerability management workflows: scanning, triage, remediation tracking, and reporting
Experience hardening systems against secure baselines such as CIS Benchmarks or DISA STIGs
Familiarity with secure software development practices: secrets management, access control, auditability, and CI/CD pipeline security
Strong written communication skills, including the ability to produce ATO artifacts that hold up to assessor and AO review
Ability to translate compliance requirements into specific engineering work and partner closely with developers
What Will Set You Apart
Direct experience supporting ATO or continuous authorization for systems hosted at DHS, or another DHS component.
Familiarity with DHS 4300A and cybersecurity policies and processes
FedRAMP readiness or assessment experience (Moderate or High)
Hands-on container and Kubernetes security experience (e.g., EKS, image scanning, admission control, runtime protection)
DevSecOps experience integrating security scanning into GitLab CI/CD pipelines
Experience securing LLM, GenAI, or agentic AI systems, including data handling, prompt and tool-call risk, and model output controls
Experience with vulnerability management platforms such as Tenable
Experience with ATO documentation tooling (e.g., Xacta, OpenRMF, or similar)
Familiarity with CISA Binding Operational Directives, Continuous Diagnostics and Mitigation (CDM), or High Value Asset (HVA) program requirements
Target salary range: $111,427 - $200,000
Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.
Job Locations
US-Remote
Options
Apply for this job onlineApply
Share
Email this job to a friendRefer
Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed
LMI is an Equal Opportunity Employer. LMI is committed to the fair treatment of all and to our policy of providing applicants and employees with equal employment opportunities. LMI recruits, hires, trains, and promotes people without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, disability, age, protected veteran status, citizenship status, genetic information, or any other characteristic protected by applicable federal, state, or local law. If you are a person with a disability needing assistance with the application process, please contact
Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.
Need help finding the right job?
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
- Dice Id: RTL412549
- Position Id: 2026-14229_1
- Posted 30+ days ago
Never miss an opportunity! Create an alert based on the job you applied for.