Systems Security Engineer III

Sierra Nevada Corporation•Lone Tree, CO

1d•$113,922 - $156,642

About The Position

SNC’s ISR, Aviation, and Security business area provides end-to-end C4ISR capabilities, including design, integration, testing, certification, training, and logistics support. The Systems Security Engineer III will support the SNC-led Survivable Airborne Operations Center (SAOC) program, which is modernizing the next-generation airborne command post for the U.S. Air Force. In this role, you will help secure SNC’s IT infrastructure by leading the design, implementation, and maintenance of secure IT systems. You will oversee advanced incident response and digital forensics, strengthen Windows environments and Active Directory services, assess risks and vulnerabilities, and develop and enforce security controls. The role also includes researching security technologies and mentoring junior security engineers. The position requires a current, active U.S. security clearance and U.S. citizenship. The posting describes a current/active Secret clearance with the ability to obtain Top Secret clearance with SCI eligibility; a later notice states that current/active Top Secret clearance with SCI eligibility is required. Work may be performed in an office or hybrid environment, with occasional travel and participation in an incident-response on-call rotation.

Requirements

Bachelor’s degree in Systems Security, Network Engineering, Information Technology, or a related engineering discipline; relevant experience may substitute for the education requirement, with at least 9 years of related experience required in the absence of a degree.
At least 5 years of experience in IT security or a related field.
A higher-level relevant degree may substitute for experience.
Advanced understanding of cybersecurity principles and practices.
Experience with security frameworks and standards such as NIST and ISO 27001.
One of the following certifications: Information System Security Officer (ISSO), Security+, Certified Information Systems Auditor (CISA), or CompTIA Advanced Security Practitioner (CASP+).
Current/active U.S. security clearance. The posting specifies Secret clearance with the ability to obtain Top Secret clearance with SCI eligibility, and also states that current/active Top Secret clearance with SCI eligibility is required.
U.S. citizenship is required because the position requires an active U.S. security clearance.
Ability to participate in an on-call rotation for incident response.
Ability to work primarily at a computer for extended periods and occasionally lift up to 25 pounds.

Nice To Haves

Information Systems Security Engineer Certified Authorization Professional (ISSE CAP) certification.
Microsoft Certified Solutions Expert (MCSE), Linux, and/or Cisco Certified Network Professional (CCNP) Security certification.
Experience with security tools such as firewalls, intrusion detection systems, and antivirus software.
Experience in the aerospace or defense industry.

Responsibilities

Lead the design and implementation of secure IT infrastructure.
Build and harden Windows virtual machines, Active Directory domains, and hypervisors using strict security baselines and best practices.
Maintain Active Directory forest security, including trust relationships, domain controllers, and certificate services (PKI).
Create, test, and deploy Group Policy Objects (GPOs) to enforce security settings across Windows servers and workstations.
Perform advanced security monitoring and threat analysis.
Direct and manage complex incident response and digital forensics.
Conduct in-depth risk and vulnerability assessments.
Develop and enforce comprehensive security controls and protocols.
Research, evaluate, and recommend new security technologies.
Oversee security breach documentation and impact analysis.
Provide mentorship and guidance to junior security engineers.