Senior Cyber Security Engineer

CACI International•Colorado Springs, CO

1d•$90,300 - $189,600•Onsite

About The Position

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products. Leads risk assessments and provides recommendations for application design. Leads cybersecurity initiatives including architectures, firewalls, electronic data traffic, and network access. Provides guidance on encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research. May support security report preparation for delivery to regulatory agencies.

Requirements

BS Degree in related field plus 5 years of related experience or equivalent combination of education / experience
Active DoD Secret Security Clearance required or the ability to obtain and maintain one
Technically competent, strong data analysis skills, solid decision making, critical thinking, strong customer focus, self-motivated, desire to learn, effective and professional interpersonal skills, pride in work, strong team player, and hardworking

Nice To Haves

DoD 8140 Cyber Defense Analyst or Vulnerability Analyst Intermediate Qualification or certification (e.g., CISSO, CySA+, GPEN, CISA, or technical BS from an ABET accredited or CAE designated institution [as defined in DoD 8140])
SCN and/or DoD experience
Cybersecurity Tool experience (e.g., eMASS, ACAS, ESS, SIEM, STIGs)
Flexibility and willingness to take on unanticipated tasks is highly desirable.

Responsibilities

Maintain multiple RMF packages and performing risk assessments across mission systems supporting the Data Transport and Receive Network (DTRN) (e.g., SCN, SCN Test Lab, Orbital Analysis Subsystem).
Serve as a cybersecurity expert leading and tasking Junior and Journeymen Information Security Analyst in effective RMF execution.
Develops and implement an Anti-virus/Malware identification process for checking in/out of SCN equipment from/to SCN sites.
Coordinates with Software Maintenance Action (SWMA) IA patching team and with the program office IA architecture team on an IA/Cybersecurity Roadmap to identify non-compliant IA controls and propose corrective actions.
In coordination with the Government, employ system security engineering to design, develop and implement secure applications and configurations. In preparation of acquiring mission hardware for all IA-impacting projects/efforts, evaluate the COTS and GOTS, when available, hardware, firmware, and software information security components.
Organize annual cybersecurity control validation within eMASS IAW DoDI 8510.01 and DoDI 8500.01.
Attends Technical Interchange Meetings at key project phases (Requirements, Design, etc.) to obtain cybersecurity community buy off.
Participates in the development and implementation of policies, procedures and standards related to information security, privacy and incident response, and monitors compliance to these policies and programs.
Provides technical engineering services management for the support of integrated security systems and solutions.
Uses tools and processes to monitor information systems for security-related events.
Assesses cybersecurity configuration changes for major security infrastructure platforms.
Helps maintain a library of security audit tools, and corresponding processes that can be used for system security testing, internal audits, incident response, and diagnosis of security-related system issues.
Travel to CONUS and OCONUS locations may be required (up to 20%)