Cyber Security Compliance & Integration Engineer - (ICSICE052126.1)

Cimarron•Colorado Springs, CO

3d•Onsite

About The Position

Cimarron is seeking a Cyber Security Compliance & Integration Engineer to support the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract at Schriever Space Force Base in the Colorado Springs, CO area. This role involves acting as a core compliance driver, assisting with artifact generation, control mapping, and evidence gathering for eMASS package submissions. The engineer will manage the lifecycle of Plan of Action and Milestones (POA&Ms), draft and maintain system-specific implementation documents, SOPs, and cybersecurity policies aligned with NIST SP 800-53 controls. Additionally, the position requires supporting ACAS and Trellix/ESS engineers, handling overflow tasks, troubleshooting tools, and providing backup support. The role also includes managing Cyber Tasking Orders (CTOs) and DoW directives, interfacing with scanning tools for data analysis and reporting, and collaborating with various teams to ensure telemetry, logging, and system configurations meet DoW cyber requirements and ATO readiness standards.

Requirements

Due to facility security requirements, only U.S. citizens are eligible for consideration at this time.
Ability to complete a pre-employment background check and drug screening, which will include, but is not limited to, testing for marijuana use.
This position requires access to federal facilities.
Candidates must possess a valid, unexpired Real ID-compliant driver's license or state-issued identification card at the time of hire.
Active Secret Clearance.
Ability to support overtime, extended hours, and weekend work, if needed.
Current DoW 8570.01-M IAT Level II certification (e.g., CompTIA Security+).
2 or more years of general, full-time work experience.
2 or more years of directly related experience in an engineering or cybersecurity field.
Experience with DoW cybersecurity processes, procedures, and tools used to perform data correlation (e.g., ACAS, HBSS, ArcSight).

Nice To Haves

Current CompTIA CySA+, CASP+, or other advanced DoW 8570-aligned certification(s)
Familiarity with NIST SP 800-53 Rev 5 implementation within the RMF lifecycle, and previous experience submitting eMASS packages or assisting in artifact creation and control mapping.
Strong understanding of DISA CTOs, Information Assurance Vulnerability Alerts (IAVAs), and Security Technical Implementation Guide (STIG) enforcement.
Prior hands-on exposure to Elastic SIEM, ACAS, or Trellix ePO.
Experience writing policies and procedures for POA&Ms, Security Assessment Reports (SARs), and Continuous Monitoring, with strong overall skills in technical writing for compliance.
Familiarity with DoW networks, enclave segmentation, and boundary defense fundamentals.
Demonstrated ability to collaborate across multiple functional teams and support technical leadership initiatives.

Responsibilities

Act as a core compliance driver to support the formal Information System Security Officer (ISSO) team.
Assist heavily in artifact generation, control mapping, and gathering evidence for Enterprise Mission Assurance Support Service (eMASS) package submissions.
Own the lifecycle of Plan of Action and Milestones (POA&Ms), including creating, tracking, and submitting extensions to ensure continuous compliance and risk mitigation.
Draft, refine, and maintain system-specific implementation documents, Standard Operating Procedures (SOPs), and cybersecurity policies to ensure strict alignment with NIST SP 800-53 controls.
Serve as a versatile technical generalist willing and able to support ACAS and Trellix/ESS engineers.
Handle overflow tasking, tool troubleshooting, and provide backup support during surge operations or tool outages.
Manage the tracking, interpretation, and submission of Cyber Tasking Orders (CTOs) and DoW directives.
Interface with scanning tools to assist with data analysis and security reporting.
Work seamlessly with team leads, Information System Security Managers (ISSMs), and Elastic stack engineers to ensure telemetry, logging, and system configurations continuously meet DoW cyber requirements and Authority to Operate (ATO) readiness standards.