Cybersecurity Engineer

Support secure deployment and continuous authorization for LMI’s IronSled platform for federal missions in an onsite role in Colorado Springs.

Responsibilities

• Lead RMF activities for the LIGER deployment, including system categorization, control selection and tailoring, implementation, assessment, and continuous monitoring
• Own and maintain authorization artifacts: System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and supporting documentation aligned to DHS requirements
• Coordinate with ISOs, Authorizing Officials, and cyber working groups to advance ATO and continuous authorization activities
• Interpret NIST 800-53 controls for the LIGER platform and translate them into actionable engineering requirements
• Run and review vulnerability scans across CI/CD pipelines and runtime environments; triage findings and drive remediation with the engineering team
• Validate secure configurations and hardening baselines such as CIS Benchmarks and DISA STIGs for containers, hosts, and cloud resources
• Partner with platform engineers on cloud and container security in AWS GovCloud, including IAM, network controls, secrets management, logging, and runtime protection
• Develop and maintain security policies, procedures, and SOPs specific to LIGER on customer infrastructure
• Track audit findings, remediation actions, and POA&M items through closure
• Support FedRAMP-aligned control implementation and inheritance where applicable
• Advise senior LIGER and leadership teams on system risk levels, control effectiveness, and emerging compliance considerations for AI/LLM systems in federal environments

Requirements

• Active TS/SCI security clearance
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field
• 5+ years designing, implementing, and monitoring cybersecurity solutions in federal environments
• 5+ years hands-on RMF experience, including ATO development and continuous monitoring against NIST 800-53
• CISSP, CISM, or equivalent senior-level cybersecurity certification
• Experience securing LLM, GenAI, or agentic AI systems, including data handling, prompt and tool-call risk, and model output controls
• Strong cloud security knowledge, particularly AWS, with experience in GovCloud or similar high-compliance environments
• Experience with vulnerability management workflows: scanning, triage, remediation tracking, and reporting
• Experience hardening systems against secure baselines such as CIS Benchmarks or DISA STIGs
• Familiarity with secure software development practices: secrets management, access control, auditability, and CI/CD pipeline security
• Strong written communication skills, including producing ATO artifacts suitable for assessor and AO review
• Ability to translate compliance requirements into specific engineering work and partner closely with developers

Technologies

• IronSled
• RMF
• NIST 800-53
• CI/CD pipelines
• DHS requirements
• CIS Benchmarks
• DISA STIGs
• AWS GovCloud
• FedRAMP
• LLM
• GenAI
• agentic AI systems
• AI/LLM systems
• CISSP
• CISM
• GitLab CI/CD
• Tenable
• Xacta
• OpenRMF
• DHS 4300A
• DHS component

What Will Set You Apart

• Direct experience supporting ATO or continuous authorization for systems hosted at DHS or another DHS component
• Familiarity with DHS 4300A and cybersecurity policies and processes
• FedRAMP readiness or assessment experience (Moderate or High)
• Hands-on container and Kubernetes security experience (e.g., EKS, image scanning, admission control, runtime protection)
• DevSecOps experience integrating security scanning into GitLab CI/CD pipelines
• Experience securing LLM, GenAI, or agentic AI systems, including data handling, prompt and tool-call risk, and model output controls
• Experience with vulnerability management platforms such as Tenable
• Experience with ATO documentation tooling (e.g., Xacta, OpenRMF, or similar)
• Familiarity with CISA Binding Operational Directives, Continuous Diagnostics and Mitigation (CDM), or High Value Asset (HVA) program requirements

Location: Colorado Springs, CO 80919 (onsite)
Salary: USD 111,427 - 200,000 per year