Cyber Security Engineer

Location: Remote (U.S.)
Clearance: Ability to obtain and maintain a Public Trust
Salary Range: 100K – 120K

LTS is seeking a skilled and mission-focused Cyber Security Engineer to support a major modernization initiative within the Department of Veterans Affairs (VA) health portfolio. This role will support cybersecurity engineering, risk management, and security modernization efforts across enterprise healthcare systems and infrastructure environments supporting Veteran healthcare operations nationwide.

The ideal candidate will possess strong experience securing complex federal IT systems, supporting cloud and hybrid environments, and implementing cybersecurity solutions aligned with federal compliance frameworks and Zero Trust initiatives. This individual will work closely with infrastructure, application, integration, and DevSecOps teams to ensure modernization efforts are designed and deployed with security at the forefront.

What You’ll Do:
• Support cybersecurity engineering for the pilot, including cloud security, RMF/ATO support, compliance documentation, and continuous monitoring.
• Secure AWS-based environments through identity and access management, encryption, logging, monitoring, network security, vulnerability management, and configuration hardening.
• Configure, monitor, and support AWS security services such as AWS Network Firewall, Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, and related capabilities.
• Support security planning for an AWS Commercial Cloud environment with consideration for future migration to AWS GovCloud or another VA-approved hosting environment.
• Assist with ATO planning, control implementation, evidence collection, compliance reporting, and approval workflows.
• Work within eMASS, ServiceNow GRC, or similar risk management systems to support ATO artifacts, information assurance tasking, POA&M tracking, and security documentation.
• Develop and maintain SSPs, POA&Ms, SOPs, risk assessments, control narratives, security diagrams, and remediation plans.
• Support vulnerability assessments, DISA STIG hardening, configuration compliance reviews, remediation tracking, and audit readiness activities.
• Integrate security requirements into architecture, sprint planning, CI/CD processes, testing, and deployment readiness.
Support security reviews for VIA platform capabilities, including data handling, access control, auditability, secure integration, and AI-enabled modernization workflows.
• Collaborate with technical and non-technical stakeholders to translate security requirements into practical engineering, documentation, and compliance actions.