LTS
Cyber Security Engineer
RemoteUnited States only
- Role
- Security
- Experience
- Senior
$100k–$120k/yr
Check eligibility
Open to US only. Set where you work from to check your eligibility.
No BS summary
Senior Cyber Security Engineer (5+ yrs) to secure AWS cloud environments for a VA healthcare modernization program. Must have RMF/ATO, NIST SP 800-53, and federal compliance experience. US-based remote with ability to obtain Public Trust clearance required.
Core skills
AWSRMF/ATO
Required skills
IAMAWS Network FirewallSecurity HubGuardDutyCloudWatchCloudTrailInspectoreMASSServiceNow GRCDISA STIGNIST RMFNIST SP 800-53FISMAFedRAMPZero TrustDevSecOpsCI/CD
Optional skills
AWS GovCloudVistACPRSMUMPSKubernetesInfrastructure as CodeHL7FHIR
What you'll do
- Support cybersecurity engineering for the pilot, including cloud security, RMF/ATO support, compliance documentation, and continuous monitoring.
- Secure AWS-based environments through identity and access management, encryption, logging, monitoring, network security, vulnerability management, and configuration hardening.
- Configure, monitor, and support AWS security services such as AWS Network Firewall, Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, and related capabilities.
- Support security planning for an AWS Commercial Cloud environment with consideration for future migration to AWS GovCloud or another VA-approved hosting environment.
- Assist with ATO planning, control implementation, evidence collection, compliance reporting, and approval workflows.
- Work within eMASS, ServiceNow GRC, or similar risk management systems to support ATO artifacts, information assurance tasking, POA&M tracking, and security documentation.
- Develop and maintain SSPs, POA&Ms, SOPs, risk assessments, control narratives, security diagrams, and remediation plans.
- Support vulnerability assessments, DISA STIG hardening, configuration compliance reviews, remediation tracking, and audit readiness activities.
- Integrate security requirements into architecture, sprint planning, CI/CD processes, testing, and deployment readiness.
- Support security reviews for VIA platform capabilities, including data handling, access control, auditability, secure integration, and AI-enabled modernization workflows.
- Collaborate with technical and non-technical stakeholders to translate security requirements into practical engineering, documentation, and compliance actions.
What they require
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
- 5+ years of cybersecurity engineering experience supporting federal, cloud, healthcare, or other regulated environments.
- Experience securing AWS cloud environments, including IAM, encryption, logging, monitoring, network security, and vulnerability management.
- Hands-on experience with AWS security services such as Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, AWS Network Firewall, or similar capabilities.
- Experience supporting RMF, ATO, continuous monitoring, risk management, and federal compliance activities.
- Familiarity with eMASS, ServiceNow GRC, or similar risk management and authorization systems.
- Experience developing or supporting SSPs, POA&Ms, SOPs, control narratives, risk assessments, evidence packages, and remediation plans.
- Working knowledge of NIST RMF, NIST SP 800-53 controls, FISMA, FedRAMP, Zero Trust, and federal cybersecurity requirements.
- Knowledge of DISA STIGs, secure configuration baselines, system hardening, and vulnerability remediation processes.
- Familiarity with DevSecOps, secure SDLC practices, automated security scanning, CI/CD security, and environment hardening.
- Strong communication, documentation, analytical, and problem-solving skills.
LTS supports mission-focused programs that improve healthcare services and outcomes for Veterans nationwide.
AI
$100k–$120k/yr