Hybrid IT Security Lead

at LMI

• Job title: IT Security Lead
• Job type: Full Time
• Experience level: Senior
• Salary: $135,000 - $225,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Cloud
• Location requirements: Hybrid, United States

About the role

• Security Lead managing GSA cloud applications security architecture. Collaborating with teams to ensure compliance with federal security standards and best practices.

Responsibilities

• Serve as the primary authority for system security architecture and compliance
• Collaborate directly with GSA security personnel to define and implement security and compliance controls required for cloud-based applications
• Ensure development teams adhere to approved security architecture and control implementations
• Establish and maintain security documentation, policies, and procedures aligned with federal standards
• Ensure compliance with FISMA and agency-specific security policies governing federal information systems.
• Lead the system through the full Authorization to Operate (ATO) lifecycle for applications
• Develop and maintain System Security Plans (SSPs), security control documentation, and supporting artifacts
• Manage Plans of Action and Milestones (POA&Ms) and track remediation activities
• Support security control assessments and coordinate responses to findings
• Align controls with guidance from the National Institute of Standards and Technology (NIST), FedRAMP requirements, and Trusted Internet Connections (TIC)/cloud security guidance
• Embed automated security controls into CI/CD pipelines to enable secure, continuous delivery
• Promote secure coding practices and continuous monitoring across development teams
• Conduct security risk assessments and oversee vulnerability scanning and penetration testing activities
• Manage security incident response coordination and reporting
• Maintain continuous monitoring practices and ensure audit readiness for all system components
• Support ongoing authorization and continuous ATO practices through automated control monitoring and real-time risk visibility.

Requirements

• Demonstrated experience serving as a Security Lead (or equivalent role) on federal IT programs
• Extensive hands-on experience implementing federal security architectures aligned with NIST guidance, FedRAMP, and TIC/cloud security requirements
• Proven track record leading systems through the full ATO lifecycle, including SSP development and POA&M management
• Deep understanding of integrating security controls into CI/CD pipelines consistent with DevSecOps principles
• Expert-level knowledge securing applications and infrastructure in AWS cloud environments
• Experience conducting risk assessments, vulnerability management, and maintaining audit readiness
• Strong written and verbal communication skills

Benefits

• Health insurance
• 401(k) matching
• Flexible work hours
• Paid time off
• Remote work options