Cybersecurity Engineer III

$124,771 - $171,561/Yr

Sierra Nevada Corporation

Full-time - Mid Level

Transportation Equipment Manufacturing

About the position

As a Cybersecurity Engineer III (CSE) at SNC, you will be responsible for safeguarding systems throughout the acquisition lifecycle, ensuring the highest standards of cybersecurity and Information Assurance (IA) solutions. Your role will involve collaborating with various stakeholders to implement and maintain cybersecurity controls, thereby ensuring the confidentiality, integrity, and availability of systems. This position is critical in a dynamic environment where your contributions will significantly impact the organization and its customers.

Responsibilities

• Establish and validate system boundaries and ensure comprehensive documentation of information systems and compliance standards.
• Collaborate with cross-functional teams to validate security requirements and develop documentation for security and compliance activities.
• Provide input to CMMC documentation including Systems Security Plans (SSP) and Risk Assessment Reports.
• Integrate cybersecurity requirements into ITSM processes with continuous feedback for ongoing enhancements.
• Conduct detailed security risk assessments, including threat modeling and penetration testing, to identify vulnerabilities.
• Lead configuration management and provide expert guidance on cybersecurity best practices during system development.
• Coordinate compliance activities and conduct periodic security control assessments to ensure ongoing compliance with NIST 800-171 and corporate policies.
• Enhance technical cybersecurity/IA skills and maintain knowledge in areas such as cloud security and incident response.

Requirements

• Bachelor's degree in Cybersecurity, Network Engineering, Information Technology, or related Engineering discipline and typically 6 or more years of relevant experience.
• DoDD 8140 IAT Level II certification required within 6 months of hire.
• Strong communication skills to translate complex cybersecurity information into quantifiable business risk.
• Knowledge of technical standards relating to systems security and experience with large-scale enterprise IT environments.
• Solid understanding of at least one security framework, preferably NIST 800-171.
• Ability to balance cybersecurity requirements with organizational goals and culture.
• Strong critical thinking and problem-solving skills, with the ability to prioritize multiple projects.

Nice-to-haves

• CISSP, CISM, Security+, CISA, CASP+, or other relevant security certification.
• Azure cloud certifications or other relevant cloud certification.
• Proven track record of maintaining confidentiality of high-sensitivity projects.
• Knowledge of DoD, government contracting, and public auditing policies.

Benefits

• Medical, dental, and vision plans
• 401(k) with 150% match up to 6%
• Life insurance
• 3 weeks paid time off
• Tuition reimbursement