Cybersecurity Engineer

Cybersecurity Engineer

LOCATION: Colorado Springs, CO

JOB STATUS: Full-time

SALARY: $120,000 - $170,000

CLEARANCE: TS/SCI

TRAVEL: Up to 10%

Astrion is seeking a Cybersecurity Engineer to join our team in Colorado Springs, CO.

The Cybersecurity Engineer will design, develop, implement, and integrate cybersecurity into information systems, components, and organizational processes IAW DoD, USAF, and USSF policy.

REQUIRED QUALIFICATIONS 

• Five (5) years of experience working in a cybersecurity or related field
• Must meet position and certification requirements for the following DoW Cyberspace Workforce Role Code(s) and Proficiency Level(s):
  • 631 - Information Systems Security Developer (Proficiency Level: Intermediate)
  • 462 - (Control Systems Security Specialist) (Proficiency Level: Intermediate)
  • 541 - Vulnerability Assessment Analyst (Proficiency level: Intermediate)
• Experience with both Linux- and Windows-based operating systems
• Knowledge of scripting (e.g. Bash, Python, etc.)
• Expert knowledge of federal security requirements and mandates (e.g., RMF, Federal Information Processing Standards (FIPS), National Standards of Information Technology (NIST))
• Experience working on DISA Security Technical Implementation Guide (STIG) implementation across multiple operating systems and applications
• Must be a team player and be able to work within all levels of a project team
• Excellent time management, scheduling, and organizational skills
• Ability to work well independently
• Demonstrated ability to complete tasks, drive projects to closure, assimilate and correlate project information in a fast-paced environment
• Demonstrated ability to shift from one project to another in a dynamic, agile work environment
• Excellent oral and written communication skills and ability to clearly translate client technical needs into technical specifications
• Ability to communicate technical approaches and details within small project teams, including team interactions and presentations
• Familiarity with security procedures while working in a SCIF/SAPF environment
• Active TS/SCI clearance

PREFERRED QUALIFICATIONS 

• Hands-on technical experience as an individual contributor with documentation skills and experience in some of the following areas: Operating system hardening, Linux system administration, Windows system administration, Network component administration, infrastructure-as-code programming
• Apply system security engineering expertise to various client programs/processes (e.g., system security design process, engineering life cycle, information domain and cross domain solutions, identification / authentication / authorization of commercial off-the-shelf and government off-the-shelf software employment, system integration, risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, auditing, certification and accreditation process, principles of IA (confidentiality, integrity, non-repudiation, availability, and access control), security testing, supply chain risk)
• Experience using Security Incident and Event Management (SIEM)
• Experience with securing and monitoring a CI/CD pipeline
• Experience working on-site in a government client environment

KEY FUNCTIONS

• Work with project leads on the design and implementation of security solutions comprised of COTS, GOTS, OSS, and custom-developed products.
• Perform hands-on technical implementation of security solutions comprised of COTS, GOTS, OSS, and custom-developed products.
• Cyber tool implementation, configuration and support.
• Perform technical security assessments of complex systems
• Identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies
• Write authorization and accreditation (A&A) documentation and ensure the system are operated and maintained in accordance with these security plans
• Design and implementation of trusted relationships among multiple systems and architectures
• Support security planning, assessment, risk analysis, and risk management for systems
• Interact with technical team members from multiple organizations in a diversified, team environment
• Perform system or network designs that encompass multiple enclaves to include those with differing data protection/classification requirements
• Perform key functions (above) and other security-related tasks as directed on multiple systems, at multiple sites, or for multiple clients

#CJ