Senior Security Risk Management Framework Engineer

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $110k - $125k / year

⏰ Full Time

🟠 Senior

🔒 Insurance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

LTS

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

LTS is a government-focused mission support and healthcare services firm that provides emergency response, occupational health, automated healthcare solutions, and enterprise consulting. It offers rapid nationwide deployment for disaster response, logistics and mass care, and delivers automated diagnostic kiosks, diagnostic lab testing, medical staffing, on-site clinics, and testing/vaccination management for underserved and remote populations. LTS also provides IT modernization, cloud and systems integration, cybersecurity and risk management, AI/ML and data analytics, and program management for federal, state, and local clients with strong compliance (HIPAA and federal standards) and public-sector acquisition experience.

📋 Description

• Assess VA.gov Platform compliance with VA’s 18 Critical Controls and establish a baseline of implementation and remaining gaps • Perform security reviews, gap analyses, and risk assessments across infrastructure, pipelines, applications, and component systems • Support ongoing ATO and cATO readiness for the VA.gov Platform authorization boundary • Develop, update, and maintain RMF and authorization artifacts, including SSPs, control narratives, POA&Ms, BIAs, PTAs, and supporting evidence • Translate control deficiencies into prioritized technical remediation work with DevSecOps engineers • Validate engineering remediation against security-control requirements and update authorization documentation and evidence • Support OSCAL-based machine-readable security control models and automated evidence collection • Develop and maintain POA&M processes and automate the POA&M lifecycle where feasible • Conduct and support threat modeling, secure-design reviews, and security risk assessments • Develop, coordinate, and maintain MOUs and ISAs • Coordinate with VA security stakeholders, AODRs/AOs, OIS, CSOC, auditors, and other authorization stakeholders • Provide security guidance and consultation to VA.gov Platform and product teams • Develop security guidance, standards, decision trees, and training • Support security incident response, post-incident analysis, and resulting remediation • Participate in an on-call rotation for critical security events as required • Keep ATO documentation and supporting evidence synchronized with engineering changes

🎯 Requirements

• Associate’s degree + four years of relevant professional experience OR Bachelor’s degree + two years of relevant professional experience OR five years of relevant Cyber Security Engineer experience in lieu of a degree • U.S. Citizen or Permanent Resident required • Ability to obtain a Public Trust • Strong experience with NIST Risk Management Framework (RMF) and NIST 800-53 security controls • Experience supporting ATOs for complex information systems • Experience performing security control assessments, gap analyses, risk assessments, and remediation planning • Experience developing and maintaining SSPs, control narratives, POA&Ms, and security authorization evidence • Ability to understand cloud infrastructure, CI/CD pipelines, application architectures, and modern software-development practices • Ability to translate compliance/control requirements into technical requirements and engineering backlog items • Experience working directly with technical engineering teams on vulnerability and control remediation • Strong written communication and documentation skills • Ability to work with technical teams, security stakeholders, auditors, and government leadership • Nice-to-have experience with VA cybersecurity, RMF, or ATO processes; FISMA High systems; cATO; OSCAL; AWS; Kubernetes/EKS; GitHub Actions; Infrastructure-as-Code; threat modeling; secure architecture reviews; vulnerability management; WASA/DAST; continuous security monitoring; and large federal digital platforms

🏖️ Benefits

• Comprehensive benefits for you and your family • Access to cutting-edge tools and technologies • Career path that rewards ambition and performance • Opportunity to support high visibility federal missions in IT and healthcare • Culture that values innovation, growth, collaboration, and quality