Senior Cyber Security Engineer

The Senior Cyber Security Engineer will design, test, and implement secure operating systems, networks, and database products while leading RMF risk assessments and cybersecurity initiatives. The role also supports IA and cybersecurity processes, validations in eMASS, and integrated security system engineering.

Key Responsibilities

• Maintain multiple RMF packages and perform risk assessments across mission systems supporting the Data Transport and Receive Network (DTRN) (including SCN, SCN Test Lab, and Orbital Analysis Subsystem).
• Lead and task Junior and Journeymen Information Security Analyst to execute RMF activities effectively.
• Develop and implement an Anti-virus/Malware identification process to support equipment check-in and check-out activities for SCN equipment between SCN sites.
• Coordinate with the SWMA IA patching team and the program office IA architecture team to define an IA/Cybersecurity Roadmap, identifying non-compliant IA controls and proposing corrective actions.
• Work with the Government to apply system security engineering to design, develop, and implement secure applications and configurations.
• For IA-impacting mission hardware acquisition efforts, evaluate available COTS and GOTS hardware, firmware, and software information security components.
• Organize annual cybersecurity control validation in eMASS in accordance with DoDI 8510.01 and DoDI 8500.01.
• Attend Technical Interchange Meetings at key project phases (for example, Requirements and Design) to obtain cybersecurity community approvals.
• Contribute to information security, privacy, and incident response policies, procedures, and standards, and monitor compliance with those programs.
• Provide technical engineering services management for support of integrated security systems and solutions.
• Use tools and processes to monitor information systems for security-related events.
• Assess cybersecurity configuration changes for major security infrastructure platforms.
• Help maintain a library of security audit tools and corresponding processes for system security testing, internal audits, incident response, and diagnosis of security-related system issues.
• Travel to CONUS and OCONUS locations may be required (up to 20%).

Required Qualifications

• BS Degree in a related field plus 5 years of related experience, or an equivalent combination of education and experience.
• Active DoD Secret Security Clearance required, or ability to obtain and maintain one.
• Technically competent with strong data analysis, critical thinking, decision making, and customer focus.
• Self-motivated with a desire to learn, strong professional interpersonal skills, pride in work, and strong teamwork.

Technologies and Tools

• RMF, eMASS
• DoDI 8510.01, DoDI 8500.01
• SCN, SCN Test Lab, Orbital Analysis Subsystem
• SWMA
• COTS, GOTS
• ACAS, ESS, SIEM, STIGs
• CISSO
• CySA+, GPEN, CISA

Desired Qualifications

• DoD 8140 Cyber Defense Analyst or Vulnerability Analyst Intermediate Qualification or certification (for example, CISSO, CySA+, GPEN, CISA, or a technical BS from an ABET accredited or CAE designated institution as defined in DoD 8140).
• SCN and/or DoD experience.
• Cybersecurity tool experience, such as eMASS, ACAS, ESS, SIEM, STIGs.
• Flexibility and willingness to take on unanticipated tasks.

Compensation, Location, and Work Details

• Location: Colorado Springs, CO (onsite)
• Salary Range: USD 90,300 to 189,600 per year
• Time Type: Full time
• Employee Type: Regular
• Job Category: Information Technology
• Travel: Up to 10% (with additional travel to CONUS/OCONUS locations may be required up to 20%)
• Type of Travel: Continental US
• Anticipated Posting End: 12/31/2026

Benefits

• Healthcare and wellness
• Financial and retirement
• Family support
• Continuing education
• Time off benefits
• Robust learning resources

Additional Opportunity Details

• Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products.
• Leads risk assessments and provides application design recommendations.
• Leads cybersecurity initiatives including architectures, firewalls, electronic data traffic, and network access.
• Provides guidance on encryption technology and supports penetration and vulnerability analysis of security technologies, along with information technology security research.
• May support security report preparation for delivery to regulatory agencies.

What You Can Expect

• A culture of integrity
• An environment of trust
• A focus on continuous growth