信息保障专员 - 需要安全许可

Overview
LMI is seeking an Information Assurance Specialist to support Army Acquisition, Training, and Readiness (AT&R) in the sustainment and enhancement of the Army Contract Writing System (ACWS). ACWS is built on the Appian Platform. This role will support cybersecurity, compliance, risk management, and system authorization activities to help ensure ACWS meets applicable Army and DoD security requirements.
LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.
Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.
Responsibilities
The Information Assurance Specialist will work closely with system administrators, engineers, developers, DevSecOps personnel, program managers, and security stakeholders to maintain a strong security posture across a mission-critical enterprise application environment.

• Support information assurance and cybersecurity activities for ACWS and associated enterprise environments.

• Assist with implementation and maintenance of security controls in accordance with NIST, RMF, STIG, and applicable DoD requirements.

• Support system security authorization, assessment, accreditation, and Authority to Operate (ATO) activities.

• Conduct security assessments, vulnerability reviews, compliance evaluations, and security control reviews.

• Monitor security findings and coordinate remediation activities with system, application, infrastructure, and DevSecOps teams.

• Develop and maintain security documentation including System Security Plans (SSPs), POA&Ms, policies, procedures, assessment artifacts, and continuous monitoring documentation.

• Assist with continuous monitoring activities, security metrics, status reporting, and cybersecurity reporting requirements.

• Support security audits, inspections, customer assessments, and responses to identified findings.

• Evaluate system and application changes to ensure continued compliance with established security requirements.

• Work with stakeholders to identify cybersecurity risks and support development of practical mitigation strategies.

• Support incident response and security investigations as needed and participate in root cause and remediation activities.

• Stay current on evolving cybersecurity threats, regulations, security controls, and federal best practices relevant to ACWS.

Qualifications
MINIMUM QUALIFICATIONS:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or related field; equivalent experience may be considered.

• 5-10+ years of experience supporting Information Assurance, cybersecurity, information security, or cyber risk management programs.

• Knowledge of NIST cybersecurity frameworks and Risk Management Framework (RMF) processes.

• Experience developing and maintaining security documentation and compliance artifacts.

• Experience supporting vulnerability management, security assessments, and compliance activities.

• Understanding of security controls, risk management, secure configuration, and cybersecurity best practices.

• Strong analytical, organizational, writing, and communication skills.

• Active Secret clearance or ability to obtain and maintain one.

• U.S. citizenship required.

DESIRED SKILLS

• Active Secret security clearance.

• Active DoD 8140-aligned cybersecurity certification such as CISSP, CISM, or Security+.

• Security certifications such as Security+, CISSP, CAP, CISM, or CASP+.

• Experience supporting Army or DoD programs and security requirements.

• Demonstrated experience leading or coordinating cybersecurity, RMF, ATO, or compliance activities for federal or DoD systems.

• Experience with eMASS, ACAS, SCAP, STIGs, or related cybersecurity tools.

• Practical experience with NIST 800-53, NIST 800-171, CMMC, FedRAMP, or comparable federal security requirements.

• Experience working in Agile or DevSecOps environments and integrating security tasks into delivery processes.

• Experience supporting cloud security initiatives within AWS, Azure, or similar environments.

• Experience with Appian-based applications or Appian Cloud security and configuration practices preferred.

• SAFe certification such as SAFe Practitioner, Architect, or DevOps.

• Experience supporting enterprise platform teams and shared services across multiple delivery teams.

The target salary range for this position goes up to $165,000.
The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.  
Job Locations
US-RemoteOriginally posted on Himalayas