Cybersecurity Engineer III

Sierra Space•Louisville, CO

8d•$122,109 - $167,899

About The Position

The Cybersecurity Engineer III is responsible for designing, implementing, and maintaining advanced security measures to protect the organization's information systems. This role involves working with various security technologies, including encryption, intrusion detection/prevention systems (IDS/IPS), and multi-factor authentication. They will have extensive knowledge of secure systems architecture, emerging technologies, threats, and regulatory requirements. The Cybersecurity Engineer III will work closely with senior engineers and cross-functional teams to ensure the security and integrity of the organization's information systems. This position offers the opportunity to work on complex security projects, stay updated with the latest industry trends, and contribute to the continuous improvement of the organization's security posture.

Requirements

Bachelor's degree in a related field (or equivalent work experience in lieu of degree or Masters +3 years experience).
Typically 5+ years of related experience.
Certifications: (1 or more required) GIAC (Global Information Assurance Certification), network technology certifications such as a CCNP (Cisco Certified Network Professional), or SANS level 300 courses.
Knowledge of one or more: emerging technologies, emerging threats, emerging regulatory requirements.
Knowledge of secure systems architecture.

Nice To Haves

Ability to obtain and maintain a U.S. security clearance
Demonstrated experience operating or engineering an enterprise vulnerability management program across diverse technology environments.
Hands-on experience with vulnerability assessment and management platforms such as Tenable, Qualys, Rapid7, or equivalent tools.
Experience developing risk-based vulnerability prioritization methods using severity, exploitability, asset criticality, threat intelligence, and business impact.
Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, and third-party teams in a large or complex enterprise.
Experience with vulnerability exception management, compensating controls, risk management, remediation validation, and service-level reporting.
Proficiency with asset discovery, inventory reconciliation, scan configuration, credentialed scanning, authenticated assessment, and vulnerability data quality management.
Experience integrating vulnerability management platforms with ticketing, CMDB, SIEM, GRC, orchestration, or reporting systems.
Experience translating vulnerability data into executive-level risk reporting, dashboards, metrics, and actionable remediation plans.
Knowledge of common vulnerability scoring and prioritization standards, including CVE, CVSS, CWE, CISA KEV, and related threat intelligence sources.
Certifications such as CISSP, CISM, CISA, CCSP, GIAC, or a vulnerability-management-related certification.
Strong technical leadership, communication, analytical, project management, and mentoring skills.

Responsibilities

Support the enterprise vulnerability management program across infrastructure, endpoints, applications, cloud environments, and network devices.
Develop and maintain vulnerability scanning strategies, schedules, configurations, coverage metrics, and operating procedures.
Analyze vulnerability scan results and threat intelligence to validate findings, assess exploitability and business impact, and prioritize remediation using a risk-based approach.
Coordinate with infrastructure, application, cloud, network, and business teams to assign, track, and verify remediation activities within established service-level targets.
Provide technical guidance on remediation options, compensating controls, exception requests, and risk acceptance decisions.
Monitor vulnerability management dashboards, trends, and key performance indicators; prepare clear executive and technical reports on exposure, remediation progress, and residual risk.
Investigate discrepancies in scan coverage, vulnerability data, and remediation status to improve the accuracy and completeness of enterprise reporting.
Integrate vulnerability management processes and data with asset management, configuration management, ticketing, SIEM, GRC, and other security platforms.
Support vulnerability assessments, penetration testing, compliance assessments, and audits by providing evidence, technical analysis, and remediation status.
Develop scripts, workflows, and other automation to improve scanning, data analysis, ticket creation, reporting, and remediation verification.
Stay current on emerging vulnerabilities, exploitation trends, security advisories, and defensive technologies, and communicate relevant risks and recommended actions to stakeholders.