Cybersecurity Engineer

Astrion•Colorado Springs, CO

21h•Onsite

About The Position

Astrion is seeking a Cybersecurity Engineer to join our team in Colorado Springs, CO. The Cybersecurity Engineer will design, develop, implement, and integrate cybersecurity into information systems, components, and organizational processes IAW DoD, USAF, and USSF policy.

Requirements

Five (5) years of experience working in a cybersecurity or related field
Must meet position and certification requirements for the following DoW Cyberspace Workforce Role Code(s) and Proficiency Level(s): 631 - Information Systems Security Developer (Proficiency Level: Intermediate), 462 - (Control Systems Security Specialist) (Proficiency Level: Intermediate), 541 - Vulnerability Assessment Analyst (Proficiency level: Intermediate)
Experience with both Linux- and Windows-based operating systems
Knowledge of scripting (e.g. Bash, Python, etc.)
Expert knowledge of federal security requirements and mandates (e.g., RMF, Federal Information Processing Standards (FIPS), National Standards of Information Technology (NIST))
Experience working on DISA Security Technical Implementation Guide (STIG) implementation across multiple operating systems and applications
Must be a team player and be able to work within all levels of a project team
Excellent time management, scheduling, and organizational skills
Ability to work well independently
Demonstrated ability to complete tasks, drive projects to closure, assimilate and correlate project information in a fast-paced environment
Demonstrated ability to shift from one project to another in a dynamic, agile work environment
Excellent oral and written communication skills and ability to clearly translate client technical needs into technical specifications
Ability to communicate technical approaches and details within small project teams, including team interactions and presentations
Familiarity with security procedures while working in a SCIF/SAPF environment
Active TS/SCI clearance

Nice To Haves

Hands-on technical experience as an individual contributor with documentation skills and experience in some of the following areas: Operating system hardening, Linux system administration, Windows system administration, Network component administration, infrastructure-as-code programming
Apply system security engineering expertise to various client programs/processes (e.g., system security design process, engineering life cycle, information domain and cross domain solutions, identification / authentication / authorization of commercial off-the-shelf and government off-the-shelf software employment, system integration, risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, auditing, certification and accreditation process, principles of IA (confidentiality, integrity, non-repudiation, availability, and access control), security testing, supply chain risk)
Experience using Security Incident and Event Management (SIEM)
Experience with securing and monitoring a CI/CD pipeline
Experience working on-site in a government client environment

Responsibilities

Work with project leads on the design and implementation of security solutions comprised of COTS, GOTS, OSS, and custom-developed products.
Perform hands-on technical implementation of security solutions comprised of COTS, GOTS, OSS, and custom-developed products.
Cyber tool implementation, configuration and support.
Perform technical security assessments of complex systems
Identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies
Write authorization and accreditation (A&A) documentation and ensure the system are operated and maintained in accordance with these security plans
Design and implementation of trusted relationships among multiple systems and architectures
Support security planning, assessment, risk analysis, and risk management for systems
Interact with technical team members from multiple organizations in a diversified, team environment
Perform system or network designs that encompass multiple enclaves to include those with differing data protection/classification requirements
Perform key functions (above) and other security-related tasks as directed on multiple systems, at multiple sites, or for multiple clients