Product Security Engineering 2

Indotronix International Corporation • Colorado Springs, CO

12d • Onsite

About The Position

Indotronix is seeking an OnsiteJob -Product Security Engineering 2 to work at Colorado Springs, CO. This role requires an Associate Degree or Above and involves working the First Shift from 8:00 AM – 4:30 PM. An active Secret Clearance is required for this position. The Product Security Engineer 2 will partner directly with the Cyber Engineering organization to embed and validate cybersecurity solutions on the C2BMC platform, ensuring all security controls are correctly implemented and fully tested. This role serves as the primary liaison with the Cyber Test Facility (CTF) at MIDOC, coordinating test events and validating test plans. The engineer will brief program leadership on test plan analysis, assist teams in identifying cyber requirements, and support cyber teams by facilitating the timely delivery of capabilities and solutions while focusing on vulnerability management. Responsibilities include handling Information Assurance Vulnerability Management (IAVM) tickets, Cyber Tasking Orders (CTO), Common Vulnerabilities and Exposures (CVE) remediation, vendor-issued patch integration, and the application and verification of DISA STIG configurations.

Requirements

• Generally has 3+ years of related experience and may have a post-secondary degree or training in a related discipline.
• Must have an active full Secret DoD security clearance at start.
• Must have a DoD 8140 IAT-Level II certification (e.g., Security+ or higher) at start.
• Strong working knowledge of cyber capabilities, including: Patch management. Multi-factor authentication. Host-based security. Intrusion detection. Security event management. Active/passive system scanning. Defense-in-depth.
• Strong working knowledge of core cyber capabilities, including patch management, Group Policy Object (GPO) management, and proven remediation techniques for addressing cybersecurity vulnerabilities and threats.
• Security-engineering expertise in Information Assurance (IA) technologies, NIST standards, DoDI 8500.2, and Risk Management Framework (RMF) security controls.
• Hands-on experience throughout the Agile development lifecycle, specifically using the Scrum framework, including: Identifying requirements. Defining user stories. Participating in sprint planning. Participating in daily stand-ups. Participating in sprint reviews.
• Solid understanding of Software Development Life Cycle (SDLC) models and testing processes.
• Proficiency in cyber-tool software applications.
• Leadership experience, strong interpersonal skills, and the ability to support complex organizational relationships.
• Excellent technical writing and verbal communication skills to present technical cyber issues and reports to government stakeholders, program management, and other C2BMC functional areas.

Nice To Haves

• Wide application of principles, theories, and concepts in the field with the ability to provide solutions to a wide range of difficult problems using imaginative and thorough solutions.
• Ability to work under general direction, with results reviewed upon completion for adequacy in meeting objectives.
• Ability to handle responsibilities where failure to achieve results may result in serious program delays and considerable expenditure of resources.
• Ability to maintain frequent internal and external customer contacts and represent the organization in providing solutions to difficult technical issues associated with specific projects.

Responsibilities

• Partner directly with the Cyber Engineering organization to embed and validate cybersecurity solutions on the C2BMC platform at COS HWY-83, ensuring that all security controls are correctly implemented and fully tested.
• Serve as the primary liaison with the Cyber Test Facility (CTF) at MIDOC, coordinating test events and validating test plans submitted by cyber teams.
• Brief program leadership on analysis of test plans while assisting teams in identifying the specific cyber requirements needed for successful execution.
• Support cyber teams by facilitating the timely delivery of capabilities and solutions while maintaining a strong focus on vulnerability management.
• Handle Information Assurance Vulnerability Management (IAVM) tickets, Cyber Tasking Orders (CTO), Common Vulnerabilities and Exposures (CVE) remediation, vendor-issued patch integration, and the application and verification of DISA STIG configurations.
• Review test plans and test cases supplied by development teams, verify correct implementation, execute tests, and provide clear, actionable feedback to ensure compliance with cybersecurity requirements.
• Configure cyber audit tools, perform cyber vulnerability assessments, and handle configuration activities.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree