Cybersecurity Engineer II

Sierra Space•Louisville, CO

About The Position

The Cybersecurity Engineer II is a mid-level position responsible for designing, implementing, and maintaining advanced security measures to protect the organization's information systems. This role involves working with various security technologies, including encryption, intrusion detection/prevention systems (IDS/IPS), and multi-factor authentication. They will have a solid understanding of computer networking concepts, protocols, and network security methodologies, as well as an understanding of cybersecurity and privacy principles, secure software development and cyber supply chain threat monitoring. The Cybersecurity Engineer II will work closely with senior engineers and cross-functional teams to ensure the security and integrity of the organization's information systems. This position offers the opportunity to work on complex security projects, stay updated with the latest industry trends, and contribute to the continuous improvement of the organization's security posture. In this role, you will design, implement, and maintain advanced security measures, including firewalls, encryption, intrusion detection/prevention systems (IDS/IPS), and multi-factor authentication. You will assist in the configuration, deployment, and management of security tools and technologies, while implementing and managing network security measures to protect data, systems, and networks. Conducting vulnerability assessments and penetration testing to identify and mitigate security risks will be a key responsibility, along with developing and maintaining security policies, procedures, and documentation. You will collaborate with cross-functional teams to integrate security best practices into system designs and deployments, monitor and respond to security incidents and alerts, and provide technical support and troubleshooting. Staying updated with the latest industry trends, emerging threats, and regulatory requirements will be essential, as will participating in security audits and assessments to ensure compliance with cybersecurity frameworks. Additionally, you will apply secure software development practices to enhance application security, monitor and address cyber supply chain threats to protect the integrity of the organization's supply chain, and provide input on cybersecurity requirements for new projects and technologies.

Requirements

Bachelor's degree in a related field (or equivalent work experience in lieu of degree).
Typically 2+ years of related experience.
GIAC (Global Information Assurance Certification), network technology certifications such as a CCNP (Cisco Certified Network Professional), or SANS level 200 courses.
Knowledge of secure software development.
Knowledge of cyber supply chain threat monitoring.

Nice To Haves

Certifications: CySA+, GSEC, CCSP, CISA, CISM, CISSP.
Experience with security information and event management (SIEM) tools.
Familiarity with cloud security platforms such as AWS, Azure, or Google Cloud.
Knowledge of network security protocols and practices.
Strong problem-solving skills and attention to detail.
Excellent communication and teamwork skills.
Familiarity with the system development lifecycle.
Proficiency in scripting languages such as Python, PowerShell, or Bash for automation of security tasks.
Experience with endpoint detection and response (EDR) solutions.
Understanding of regulatory compliance requirements such as GDPR, HIPAA, or PCI-DSS.
Experience with identity and access management (IAM) solutions.
Knowledge of threat intelligence platforms and their integration into security operations.
Familiarity with DevSecOps practices and tools.
Experience with incident response and digital forensics.
Understanding of zero trust architecture principles.

Responsibilities

Design, implement, and maintain advanced security measures, including firewalls, encryption, intrusion detection/prevention systems (IDS/IPS), and multi-factor authentication.
Assist in the configuration, deployment, and management of security tools and technologies.
Implement and manage network security measures to protect data, systems, and networks.
Conduct vulnerability assessments and penetration testing to identify and mitigate security risks.
Develop and maintain security policies, procedures, and documentation.
Collaborate with cross-functional teams to integrate security best practices into system designs and deployments.
Monitor and respond to security incidents and alerts.
Provide technical support and troubleshooting.
Stay updated with the latest industry trends, emerging threats, and regulatory requirements.
Participate in security audits and assessments to ensure compliance with cybersecurity frameworks.
Apply secure software development practices to enhance application security.
Monitor and address cyber supply chain threats to protect the integrity of the organization's supply chain.
Provide input on cybersecurity requirements for new projects and technologies.