Cyber Tools Engineer - (ICTE083126.1)

Cimarron•Colorado Springs, CO

6d•Onsite

About The Position

Cimarron is seeking a Cyber Tools Engineer to support the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract at Schriever Space Force Base in the Colorado Springs, CO area. This role involves collaborating with various teams to develop, test, configure, troubleshoot, and deploy enterprise security tools, ensuring the high availability and integrity of security platforms. The engineer will partner with ISSO, Operations and Maintenance (O&M), and internal cybersecurity teams to meet operational cyber requirements and support cybersecurity testing and Assessment and Authorization (A&A) milestones. Responsibilities include evaluating information system infrastructure and application architectures for security requirements, identifying system vulnerabilities, recommending mitigations, gathering data, patching systems, applying STIGs, and coordinating documentation for continuous system compliance. The role also involves consolidating security telemetry and scan data into compliance reports, briefing leadership, coordinating engineering actions, and training junior engineers.

Requirements

Due to facility security requirements, only U.S. citizens are eligible for consideration at this time.
This position requires access to federal facilities.
Candidates must possess a valid, unexpired Real ID-compliant driver's license or state-issued identification card at the time of hire.
Active Top Secret Security Clearance with SCI eligibility.
4 or more years of directly related experience configuring, maintaining, and engineering enterprise-level cybersecurity tools (e.g., endpoint detection, SIEM, vulnerability scanners, access management, and compliance tools).
6 or more months of experience working in a management or leadership role.
Hands-on experience executing STIGs, patching, and applying Security Classification Guides.
Direct experience in an IT role supporting MDA customers within IRES.
Current DoW 8570.01-M IAT Level II certification (e.g., CompTIA Security+).
Experience in an IT role supporting MDA customers within the COS MDIOC within SSFB.
Direct experience supporting the MDSEA task order and familiarity with MDSEA operations.
Experience engineering and administering endpoint security suites (e.g., Trellix ESS/HBSS), SIEM platforms (e.g., Elastic, ArcSight), container security solutions (e.g., Prisma), privilege access systems (e.g., Delinea), or vulnerability assessment tools (e.g., ACAS/Nessus).
Strong understanding of Risk Management Framework (RMF), eMass, CTOs, ATOs, and POA&M lifecycles.
Demonstrated experience planning, documenting, and mitigating security controls to support official cyber assessment events (such as CVTs, CVPA, and ATO renewals).
Excellent presentation skills with a proven ability to translate complex tool data into actionable security briefings for leadership.

Responsibilities

Collaborate with hardware, software, and test teams to develop, test, configure, troubleshoot, and deploy enterprise security tools.
Ensure the high availability and integrity of security platforms (including endpoint security, SIEM, vulnerability scanners, and container security tools).
Partner closely with the ISSO, Operations and Maintenance (O&M), and internal cybersecurity teams to meet operational cyber requirements and support comprehensive cybersecurity testing and Assessment and Authorization (A&A) milestones.
Evaluate information system infrastructure and application architectures to assess security requirements.
Identify system vulnerabilities across diverse hardware/software platforms and recommend technical mitigations.
Gather critical data, perform patching, apply Security Technical Implementation Guides (STIGs), and coordinate documentation to support continuous system compliance.
Consolidate complex security telemetry and scan data from various cybersecurity tools into cohesive compliance reports.
Brief government and contract leadership in a confident, concise, and professional manner.
Coordinate engineering actions with internal/external teams, customers, and stakeholders to execute tasks and resolve problems with minimal to no impact on active missions.
Train and mentor junior tools engineers, sharing best practices for maintaining security tools in compliance with DoD, DoW, and organizational standards.