Sr Cybersecurity Engineer

Sierra Nevada Corporation•Englewood, CO

13h•Hybrid

About The Position

The Senior Cybersecurity Engineer leads the design, testing, implementation, and continuous improvement of secure operating systems, networks, and security monitoring tools. The role owns a portfolio of security operations platforms, including enterprise logging and detection platforms, and partners with security operations analysts to optimize platform performance and effectiveness. It works with the Principal Architect to align enterprise security platforms and tools with architecture requirements and mitigate enterprise security risks through coverage and gap analysis, dependency management, and capability planning. The engineer supports Zero Trust maturity by delivering device, network, workload, and data security controls. The role develops and documents security control and tool management standards, continuous improvement roadmaps, and risk treatments. It implements controls mapped to NIST SP 800-171, CMMC, and local security policies, and supplies technical evidence and design documentation for audits and assessments. The position also mentors junior engineers and collaborates with cross-functional teams and senior leaders to integrate security into IT projects. The position requires the ability to obtain and maintain a Secret U.S. Security Clearance; U.S. citizenship is required. The work may be performed in an office or hybrid environment and may require travel as needed.

Requirements

Bachelor's degree in Cybersecurity, Network Engineering, Information Technology, or a related Engineering field; relevant experience may substitute for the educational requirement.
At least 8 years of experience in a related role; without a degree, at least 12 years of related experience is required. A higher-level relevant degree may substitute for experience.
Deep and extensive understanding of cybersecurity principles and network architectures.
Proven leadership experience with security monitoring and assessment tools.
Experience supporting, troubleshooting, and administering a variety of networks, operating systems, and applications.
Expert knowledge of data security administration principles, methods, and techniques.
Strong knowledge and experience administering current Microsoft platforms.
Advanced understanding of domain structures, user authentication, and digital signatures.
Hands-on engineering experience in a Zero Trust architecture environment, focused on security operations platforms including network detection and response, endpoint protection, and data security.
Ability to work with a security architect or senior technical leader to engineer presented solutions, taking architecture direction through design, implementation, and documentation.
Ability to work in an office or hybrid environment, sit at a desk and use a computer for prolonged periods, occasionally lift up to 20 pounds, and travel as needed.
Ability to obtain and maintain a Secret U.S. Security Clearance; U.S. citizenship is required.

Nice To Haves

Advanced technical security certification such as ISC2 Certified Information Systems Security Professional (CISSP), CompTIA Certified Advanced Security Practitioner (CASP+)/SecurityX, or a GIAC certification.
Expert knowledge of how enterprise security platforms work together to support security operations requirements, including experience maturing and optimizing those platforms.
Success defining and leading implementation of platform management standards and requirements.
Experience implementing infrastructure-as-code or other automated security platform management methodologies.
Experience in regulated or high-sensitivity enterprise environments such as aerospace and defense, healthcare, or finance.
Advanced understanding of domain structures, user authentication, and digital signatures, including PKI and certificate services.
Exceptional leadership, analytical, problem-solving, and communication skills.
Ability to read and interpret security and technical documentation.

Responsibilities

Manage and continuously improve a portfolio of security operations platforms, including enterprise logging and detection platforms used by security operations analysts.
Partner with security operations analysts to optimize platform performance and effectiveness.
Work with the Principal Architect to ensure enterprise security platforms and tools meet architectural requirements and mitigate enterprise security risks, including through coverage and gap analysis, dependency management, and capability planning.
Support alignment with Zero Trust principles and improve Zero Trust maturity by delivering device, network, workload, and data security controls.
Work with junior engineers to develop and document security control standards, tool management standards, and continuous improvement roadmaps.
Analyze, assess, and advise on treatment of identified enterprise security risks, including designing and implementing technical controls, identifying compensating controls, and documenting risk treatment.
Develop and implement security controls mapped to NIST SP 800-171, CMMC, and local security policy requirements.
Provide technical evidence and design documentation to support audits and assessments.
Mentor and coach junior engineers on advanced security practices, platform maturity, and strategic thinking.
Collaborate with cross-functional teams and senior leadership to integrate security across IT projects.
Design, test, and implement secure operating systems, networks, and security monitoring tools.
Lead incident responses, conduct risk assessments, and develop security controls.
Research and integrate security tools and technologies to enhance the company's security infrastructure.