Systems Security Engineer III

Sierra Nevada Corporation•Englewood, CO

About The Position

As a Systems Security Engineer III supporting SNC’s ISR, Aviation, and Security business area and the SAOC mission, you will help secure IT infrastructure supporting the next-generation Survivable Airborne Operations Center aircraft. You will lead the design, implementation, and maintenance of secure IT systems, perform high-level incident response and digital forensics, and provide technical guidance to junior security engineers. The role may be performed in an office or hybrid environment, includes participation in an incident-response on-call rotation, and may require occasional travel.

Requirements

Bachelor’s degree in Systems Security, Network Engineering, Information Technology, or a related engineering discipline; relevant experience may substitute for the education requirement. Without a degree, at least 9 years of related experience is required. A higher-level relevant degree may substitute for experience.
At least 5 years of experience in IT security or a related field.
Advanced understanding of cybersecurity principles and practices.
Experience with security frameworks and standards such as NIST and ISO 27001.
One of the following certifications: ISSO, Security+, CISA, or CompTIA CASP+.
Current/active Secret U.S. security clearance and the ability to obtain Top Secret clearance with SCI eligibility are stated as requirements.
U.S. citizenship is required for the active U.S. security clearance needed for employment.
Ability to work primarily at a computer for extended periods.
Ability to participate in an on-call rotation for incident response.
Ability to occasionally lift up to 25 lbs.

Nice To Haves

Information Systems Security Engineer Certified Authorization Professional (ISSE CAP) certification.
Microsoft Certified Solutions Expert (MCSE), Linux, and/or Cisco Certified Network Professional (CCNP) Security certification.
Experience with security tools such as firewalls, intrusion detection systems, and antivirus software.
Experience in the aerospace or defense industry.

Responsibilities

Lead the design and implementation of secure IT infrastructure.
Build and harden Windows virtual machines, Active Directory domains, and hypervisors using strict security baselines and best practices.
Maintain the security of the Active Directory forest, including managing trust relationships, domain controllers, and certificate services (PKI).
Create, test, and deploy strict Group Policy Objects (GPOs) to enforce security settings across Windows servers and workstations.
Perform advanced security monitoring and threat analysis.
Direct and manage complex incident response and digital forensics.
Conduct in-depth risk and vulnerability assessments.
Develop and enforce comprehensive security controls and protocols.
Research, evaluate, and recommend new security technologies.
Oversee security breach documentation and impact analysis.
Provide mentorship and guidance to junior security engineers.