Senior Associate, Info Security Systems Engineer
About The Position
The Senior Associate, Info Security Systems Engineer supports an engineering team in defining, designing, implementing, documenting, testing, and sustaining security solutions for National Security Systems and other systems developed for government customers. The work applies current NIST Risk Management Framework standards and publications, CNNSI 1253, the Joint SAP Implementation Guide, FIPS, and the Department of Defense Cyber Survivability Endorsement Implementation Guide to support system certification and accreditation. The position works with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products using approaches such as encryption technology, vulnerability analysis, and security management. The role is performed 100% onsite in Colorado Springs, Colorado, with up to 15% travel possible. The schedule is 9/80, with every other Friday off.
Requirements
- Bachelor’s degree and at least 2 years of relevant experience; or a graduate degree and at least 1 year of related experience; or at least 4 years of related experience in lieu of a degree.
- Active Secret security clearance.
- DoD 8140.03 IAT Level 2 certification.
- Ability to work onsite; the position is 100% onsite and cannot be performed remotely.
Nice To Haves
- Experience performing Model Based Systems Engineering using UML, SysML, or UAF.
- Ability to configure or operate vulnerability analysis tools such as Tenable NESSUS Security products.
Responsibilities
- Define, design, implement, document, test, and sustain security solutions for National Security Systems and other government customer systems.
- Apply relevant NIST, CNNSI, JSIG, FIPS, and DoD cyber survivability standards and guidance to support system certification and accreditation.
- Work with system developers and commercial product vendors to design and evaluate secure systems, networks, and database products.
- Conduct vulnerability management and assessments to identify potential vulnerabilities and ensure security compliance.
- Contribute to cybersecurity product development and integrate security features into product offerings.
- Assess information-system security posture and recommend improvements.
- Implement data protection and privacy measures for sensitive information.
- Oversee cybersecurity operations and align them with business objectives.
- Configure networks to enforce security policies and prevent unauthorized access.
- Apply application security principles to protect applications against cyber threats.
- Use the NIST Risk Management Framework to manage risks and support system resilience.
- Communicate and resolve IT security risks with stakeholders.
- Evaluate and improve security architectures in response to emerging threats and technologies.
- Collaborate with stakeholders to integrate security considerations into business processes.
- Support security automation in CI/CD pipelines within a DevSecOps framework.
- Detect, prevent, and respond to cyber incidents using cyber threat mitigation strategies and tools.
- Align security milestones with product development roadmaps.
- Promote security awareness and best practices throughout the organization.
- Apply Agile methodologies to cybersecurity initiatives.
- Contribute to the development and maintenance of enterprise architecture and apply IT architectural guidelines.
- Work onsite and travel up to 15% as needed.
Benefits
- Health and disability insurance.
- 401(k) match.
- Flexible spending accounts.
- Employee Assistance Program (EAP).
- Education assistance.
- Parental leave.
- Paid time off.
- Company-paid holidays.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
