Sr. Cybersecurity Engineer

V2X•Colorado Springs, CO

2d•Onsite

About The Position

V2X is seeking a Senior Cybersecurity Engineer for its Ground-Based Radar Development team, which is designing and fielding a Common Radar Back End for UEWR, PARCS, COBRA DANE, and AN/FPS 85 radar sites. This hands-on engineering role works with engineering, software, network, integration, test, and operations personnel to implement, test, document, and sustain cybersecurity controls across development laboratories, integration environments, computing platforms, and operational radar sites. The engineer leads program cybersecurity and serves as the cybersecurity subject matter expert, providing technical leadership across requirements, architecture, integration, test, and fielding for strategic radar modernization across multiple integration laboratories supporting operational sites. The role includes designing and implementing controls for Linux and Windows systems, virtualized environments, containers, networked devices, and development infrastructure; supporting Risk Management Framework activities and security documentation; integrating security checks into software and platform delivery workflows; and assisting with cybersecurity testing, vulnerability remediation, incident response, and site installation and acceptance. The position is based in an office environment and may involve occasional travel, including CONUS, OCONUS, and remote locations.

Requirements

Bachelor's degree in a STEM, Cybersecurity, Computer Science, Information Technology, or related discipline and at least 8 years of relevant experience; an advanced degree and at least 5 years of relevant experience may be accepted. Additional directly relevant cybersecurity engineering experience may be considered in place of a degree or generalized experience.
Minimum 8 years of experience.
Ability to obtain an IAT Level I certification, such as Security+, CySA+, GCIH, Linux+, or equivalent, within 6 months.
Hands-on experience designing and implementing cybersecurity controls on enterprise, mission-critical, industrial, or Department of Defense information systems.
Experience securing and administering Linux and Windows operating systems, including hardening, patching, account management, service configuration, logging, and vulnerability remediation.
Experience applying Security Technical Implementation Guides, secure configuration standards, or comparable technical baselines.
Experience using vulnerability assessment and compliance tools such as Tenable Nessus, Tenable Security Center, OpenSCAP, ACAS, SCAP tools, or equivalent.
Experience configuring or supporting centralized logging, audit collection, security telemetry, and monitoring platforms such as Splunk, Elastic Stack, syslog, or equivalent.
Working knowledge of Risk Management Framework processes and NIST SP 800-53 security controls.
Ability to interpret cybersecurity requirements and convert them into testable technical configurations and implementation tasks.
Strong troubleshooting, documentation, and communication skills.
Experience leading effectively with software, network, systems, hardware, integration, test, and operations teams.
Proficiency with Microsoft Word, PowerPoint, Excel, and Outlook; ability to work across engineering, test, operations, and logistics teams and translate requirements into implementable cyber solutions.
Experience supporting cybersecurity activities in a systems integration laboratory, development laboratory, test environment, or operational site.
Willingness to support occasional travel, including CONUS, OCONUS, and remote locations.
U.S. citizenship and an active DoD Secret clearance.

Nice To Haves

Experience supporting radar, missile defense, space, command-and-control, intelligence, weapon, or other mission-critical systems.
Familiarity with NIST SP 800-171, DFARS 252.204-7012, Controlled Unclassified Information protection, and cybersecurity requirements for contractor environments.
Experience with Red Hat Enterprise Linux, virtualization platforms, Kubernetes, OpenShift, Docker, or other container technologies.
Experience with DoD cybersecurity tools, processes, and evidence packages used to support authorization and continuous monitoring.
Experience supporting cybersecurity test and evaluation, vulnerability assessments, adversarial assessments, or incident response.
Familiarity with Zero Trust principles, identity and access management, endpoint security, privileged access management, and data protection.
Relevant certifications such as Security+, CySA+, CASP+, CISSP, GSEC, GCIH, Linux+, Red Hat, or equivalent.
Experience producing technical evidence and documentation in support of security assessments, authorization activities, and corrective-action closure.
Fluency with Microsoft Office, including Word, PowerPoint, Excel, Visio, and Outlook.
Ability to develop and maintain scripts or automation using Python, PowerShell, Bash, Ansible, or comparable tools.
Familiarity with secure software development and DevSecOps controls, including code scanning, dependency scanning, container image scanning, artifact repositories, Software Bill of Materials, software licensing, and CI/CD security checks.
Working knowledge of network security concepts, including segmentation, access control, secure protocols, firewall rules, authentication, encryption, and privileged access.

Responsibilities

Lead a cybersecurity team responsible for designing and architecting a cybersecurity system for a radar modernization effort.
Design and implement cybersecurity controls and technical safeguards for Linux and Windows servers and workstations, virtualized environments, containers, networked devices, and development infrastructure.
Apply secure configuration baselines, Security Technical Implementation Guides, patching, account controls, endpoint protections, and vulnerability remediation under approved engineering and cybersecurity direction.
Configure and maintain security logging, audit collection, telemetry, alerting, and data forwarding to approved monitoring and Defensive Cyber Operations tools.
Perform vulnerability scanning, configuration compliance checks, remediation validation, and cybersecurity regression testing using approved tools and procedures.
Support Risk Management Framework activities by collecting objective evidence, maintaining control implementation records, updating technical artifacts, and preparing for assessments.
Support development and maintenance of System Security Plans, Plans of Action and Milestones, security assessment evidence, control implementation statements, and related technical documentation.
Integrate security checks into software and platform delivery workflows, including source and dependency scanning, container image scanning, artifact validation, Software Bill of Materials generation, and release verification.
Support secure deployment and sustainment of containerized applications and platform services in laboratory and operational environments.
Assist with cybersecurity test planning and execution, including test procedures, test-fix-test cycles, vulnerability assessments, adversarial assessments, and verification of corrective actions.
Troubleshoot cybersecurity findings with software, network, systems, hardware, test, and operations personnel, and document technically supportable corrective actions.
Support installation, integration, cutover, and site acceptance activities at laboratories and operational radar locations.
Maintain configuration-controlled cybersecurity procedures, scripts, checklists, test results, and implementation records.
Support incident response by preserving logs, gathering technical evidence, performing initial analysis, and implementing approved containment or recovery actions.
Support technical reviews and provide stakeholders with clear status, risk, issue, and remediation information.