Cybersecurity Engineer

Infinity Systems Engineering - Colorado Springs, CO

Full-time - Mid Level

Colorado Springs, CO

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Engineer position at Infinity involves supporting the Command and Control (C2) capability on multiple Space Situational Awareness (SSA) platforms. The role focuses on performing security analysis, ensuring compliance with industry standards, and collaborating with various stakeholders to implement cybersecurity measures. This mid-level position is integral to maintaining the security posture of operational and development environments.

Responsibilities

• Performing security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to define and assess compliance with accepted industry and government standards.
• Experience in Risk Management Framework (RMF) accreditation and authorization (A&A) processes to include RMF steps 1-4 (categorization, controls selection, control implementation, security assessment) and standard body of evidence (BoE) package development.
• Providing inputs and reviews for securing operating systems (Windows, Linux, Cisco IOS, etc.), application of Secure Template Implementation Guides (STIGs) and configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC.
• Coordinating the configuration management of assigned systems; auditing systems to ensure security posture integrity.
• Supporting assessments and test/analysis data to document the state of compliance with security requirements.
• Supporting security engineering activities, requirements development, design, test, configuration management and maintenance of information systems and data.
• Conducting periodic hardware/software inventory assessments.
• Collaborating with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements.

Requirements

• A minimum of 4 years of documented experience conducting security control assessments for one or more security frameworks, such as NIST, ISO 27001, or similar.
• Proven experience with Risk Management Framework (RMF) policies and implementation, including familiarity with frameworks such as DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series.
• Experience in RMF accreditation and authorization (A&A) processes, covering RMF steps 1-4: categorization, controls selection, control implementation, and security assessment.
• Proficiency in developing standard bodies of evidence (BoE) packages in support of RMF processes.
• Experience securing operating systems (e.g., Windows, Linux, Cisco IOS) and applying Secure Template Implementation Guides (STIGs).
• Familiarity with cyber defense and vulnerability assessment tools, such as ACAS and SCC, for system configuration and security assessments.
• Security+ Certification (or equivalent industry-recognized certification).

Nice-to-haves

• Windows and Linux system administration skills.
• Experience in the content development and administration of SEIM/audit reduction tools (e.g., Splunk).

Benefits

• Great Company Culture with a focus on employee happiness and satisfaction.
• 100% Company Paid Medical and Dental for employees and their families.
• Genuine work/life balance and flexibility.
• Three weeks' Vacation Front Loaded on the day you start, plus a company reward trip.
• 48 hours of sick leave, in addition to vacation, and Flex-Spending options.
• 401(k) company contribution with free professional financial planning advisors.
• Education and Professional Training Reimbursement to support career aspirations and growth.
• Profit Sharing Plan for eligible employees.