_{19th February, 2025}

Role: Cybersecurity Engineer Lead/ Principal.
Location: Hybrid / Colorado Springs, CO area.

Job Description:
A leading technology solutions provider is seeking a Cybersecurity Engineer Lead/Principal to join our mission-driven team in the Colorado Springs area.

As a Cybersecurity Engineer Lead, you will be a key player in developing and implementing cutting-edge security solutions that protect our clients' critical infrastructure and data.

This is an exciting opportunity to work alongside a talented group of engineers, contributing your expertise to the creation of secure, high-performing systems that power our nation's most important missions.

Responsibilities:

• Collaborate with a cross-functional team of engineers to design, deploy, and maintain robust cybersecurity solutions.
• Ensure the highest levels of availability, performance, and security for mission-critical systems.
• Be a part of a Top Workplace company and contribute to our culture of innovation and excellence.

• Demonstrate the ability to maintain "critical" and "high" compliance and vulnerability findings at a minimum through SAST and DAST scans.
• Possess the skills to achieve an Assessment and Authorization (A&A) certification.
• Maintain appropriate DoD Impact Level (IL) ratings for the security level of hosted data.
• Utilize a DevSecOps strategy to develop the Authority-To-Operate (ATO) authorization plan for CI/CD pipelines.
• Actively participate in cross-functional teams and perform STIG and IAVA verification activities.

• Extensive experience in cybersecurity, including risk analysis and review, as well as STIG and IAVA patching and verification.
• Proficiency in hardening platforms and applications in a Kubernetes environment and working with defensive cyber operations.
• Strong understanding of systems engineering concepts and the ability to communicate effectively with all levels of the organization.

• Cyber Security experience at all levels.
• Experience working on government contracts.
• Experience with risk analysis and review.
• Prior STIG and IAVA patching and/or /verification experience with DoD mission systems to NIPRNet and SIPRNet.
• Experience using ACAS and applying STIGs manually to generate IA artifacts/bodies of evidence.
• Experience hardening platforms and applications in a Kubernetes environment.
• Experience working in a Satellite Ground System development or operations environment.
• Experience with ground station satellite domains (command and telemetry, flight dynamics, mission planning, ground resource management).
• Experience with defensive cyber operations.
• Ability to understand and apply commonly used concepts, practices, and procedures within the systems engineering field (ISO/IEC/IEEE 15288, Mil-Std-499B).
• DFARS 252.204-7008, “Safeguarding Covered Defense Information Controls,” DFARS 252.204-7009, “Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information,” and DFARS 252.204-7012. 
• Proficiency at communicating with all levels within and outside the company, and ability to prepare and deliver presentations/summaries (both verbal and written) that appropriately address the intended audience.
• Experience with Agile and DevSecOps methodologies.  

• Minimum Secret clearance, Top Secret preferred. 
• Certified Information Security Auditor (CISA).
• Certified Information Systems Security Professional (CISSP).
• BS/MS degree in Computer Science, Engineering, or a related subject.