Cyber Security Engineer

At LufCo, the Cyber Security Engineer joins an established DevSecOps team to drive the accreditation of Army programs, bridge mission support and information assurance, and apply core knowledge of software integration and engineering disciplines. This onsite role in Aberdeen, MD emphasizes RMF stewardship, security control implementation, and embedding security practices within the development lifecycle.

Responsibilities

• Guide and support Army programs through the DoD Risk Management Framework (RMF) process, maintaining essential documentation such as the System Security Plan (SSP) and securing an Authority to Operate (ATO) across its lifecycle.
• Enforce security controls by applying Security Technical Implementation Guides (STIGs) on Linux and Windows to achieve system hardening and compliance.
• Collaborate within a DevSecOps team to support continuous accreditation of Army programs, leveraging Cybersecurity concepts, IAVMs, and net-worthiness to sustain ongoing compliance.
• Manage RMF packages within the eMASS utility and support security efforts in cloud environments.
• Bridge cybersecurity and engineering teams by working with software engineers and understanding CI/CD pipelines to weave security into the development process.
• Provide foundational system administration support to troubleshoot security-related issues on Linux and Windows platforms.

Requirements

• Active Secret clearance is the minimum; ability to obtain TS/SCI with Polygraph. US citizenship is required.
• Bachelor’s degree in a technical discipline.
• 3+ years of experience as a cyber security engineer or in a role with related responsibilities.
• Experience managing and/or supporting DoD RMF efforts, including the SSP and lifecycle ATO.
• Experience managing RMF documentation and familiarity with Cybersecurity concepts, IAVMs, Airworthiness, Safety, and Net-worthiness.
• Experience applying RMF packages in the eMASS utility and implementing STIG controls on Linux and Windows.
• Understanding of cloud environments and the tools and processes used there, plus familiarity with CI/CD pipelines.
• Understanding of authentication and authorization architectures and tool-suites, along with basic system administration principles for Linux and Windows.

Technologies

• RMF
• eMASS
• STIGs
• Linux
• Windows
• CI/CD pipelines
• Cloud environments

Benefits

• Impactful Work
• Cutting-Edge Technology
• Career Growth
• Collaborative Environment
• Comprehensive Benefits
• Competitive Pay
• Paid Time Off
• 401K contribution and employer match
• Medical, Dental, and Vision Coverage

Compensation and Benefits

• Competitive Pay: Salaries depend on labor category, years of experience, education, skills relevant to the position, and contract type.
• Benefits: Paid Time Off; 401K contributions with employer match; Medical, Dental, and Vision Coverage.
• For the full list of LufCo Benefits, visit the provided careers page: https://www.lufburrow.com/careers

Physical Requirements

• Ability to travel as required.
• Standard office environment with occasional visits to client sites, labs, or field environments.