Senior Cybersecurity Analyst (Clearance Required)

$120,552 - $165,759/Yr

Sierra Nevada Corporation - Centennial, CO

Full-time - Mid Level

Centennial, CO

Transportation Equipment Manufacturing

About the position

As a Senior Cybersecurity Analyst at Sierra Space, you will play a crucial role in safeguarding our systems and data against cyber threats. This position requires a deep understanding of cybersecurity principles and practices, particularly in relation to the Risk Management Framework (RMF). You will be responsible for identifying, evaluating, prioritizing, and remediating cyber threats under the guidance of the Cyber Security Manager. Your analytical skills will be put to the test as you continuously review existing and proposed changes to our systems, networks, and software designs. You will analyze logging and alerting data to identify potential security events and escalate them as necessary. In this role, you will collaborate closely with business users to integrate cybersecurity protections into their operations, ensuring that security measures are not just an afterthought but a fundamental part of our processes. As a key member of the incident response team, you will lead efforts to implement robust cybersecurity measures in alignment with NIST 800-171, NIST 800-172, and NIST 800-53 guidelines. This includes developing, documenting, and maintaining security policies and procedures that adhere to these standards. You will also be responsible for developing requirements, aiding in secure system design, identifying and mitigating risks, ensuring compliance, and supporting the delivery of a secure product line. Your work will involve conducting risk assessments, developing System Security Plans (SSPs), and leading security assessment and authorization (A&A) activities. You will monitor and respond to security incidents, providing guidance and support to system owners and administrators on cybersecurity best practices and RMF processes. Additionally, you will participate in security auditing and continuous monitoring activities to maintain the security posture of our systems.

Responsibilities

• Implement and manage the Risk Management Framework (RMF) across various system environments.
• Conduct risk assessments to identify and mitigate potential security threats to information systems.
• Develop, document, and update System Security Plans (SSPs) in accordance with RMF guidelines.
• Ensure compliance with NIST standards and other relevant cybersecurity frameworks and regulations.
• Collaborate with stakeholders to define and establish security controls and identify potential areas of improvement.
• Lead security assessment and authorization (A&A) activities, including conducting security control assessments.
• Monitor and respond to security incidents, ensuring that appropriate corrective actions are taken.
• Provide guidance and support to system owners and administrators on cybersecurity best practices and RMF processes.
• Participate in security auditing and continuous monitoring activities to maintain system security posture.

Requirements

• Bachelor's degree in a related discipline or 10 or more years of relevant experience.
• Experience supporting, troubleshooting, and administering a variety of networks, OSs, and applications.
• Strong knowledge and experience administering a variety of current Microsoft platforms.
• Knowledge of data security administration principles, methods, and techniques.
• Familiarity with domain structures, user authentication, and digital signatures.
• An active Secret U.S. Security Clearance is required.

Nice-to-haves

• Ability to read and interpret security and technical documentation.
• Proven track record of maintaining the confidentiality of high-sensitivity projects and data.
• Ability to perform critical-incident response.

Benefits

• Medical, dental, and vision plans
• 401(k) with 150% match up to 8%
• Life insurance
• 3 weeks paid time off
• Tuition reimbursement
• Annual incentive pay based on performance