Senior Cybersecurity Engineer/Analyst

$124,000 - $140,000/Yr

Auria - Colorado Springs, CO

Full-time - Senior

Colorado Springs, CO

Textile Product Mills

About the position

The Senior Cybersecurity Engineer/Analyst at Auria will support the Command, Control, Battle Management and Communications (C2BMC) program at Schriever Space Force Base in Colorado Springs, CO. This role is critical in ensuring the security and compliance of systems and networks integral to the U.S. missile defense operations. The position involves assessing and validating cybersecurity controls, managing user accounts, and supporting various cybersecurity assessments and authorizations.

Responsibilities

• Process and track DD Form 2875 user account forms and required training for privileged and non-privileged accounts.
• Assess systems and networks within a virtual environment and identify deviations from acceptable configurations.
• Conduct passive evaluations, such as compliance audits using STIG Viewer, and active evaluations, such as vulnerability assessments utilizing ACAS.
• Perform Security Technical Implementation Guide (STIG) assessments and hardening for Windows, Red Hat Enterprise Linux (RHEL) systems, and networking equipment.
• Develop test plans reflecting how STIG checks are implemented and show expected outcomes of those checks.
• Update Risk Management Framework (RMF) artifact documentation to track and remediate non-compliant system hardening.
• Establish program control processes to ensure risk mitigation and support system assessment and authorization.
• Support process analysis, coordination, control certification tests, compliance documentation, and investigations.
• Assist in implementing required government policies and make recommendations on process tailoring.
• Perform analyses to validate established cybersecurity controls and recommend safeguards.
• Support program test milestones through pre-test preparations, participation in tests, analysis of results, and preparation of required artifacts.
• Prepare artifacts such as Test Results, Authorization Boundary Diagrams, Network Topologies, and Ports, Protocols, and Services Management documentation.
• Support Assessment and Authorization activities and maintain the Plan of Action and Milestones (POA&M).
• Review program support and operational system audits and monitor corrective actions until closure.
• Coordinate across the program to address deficiencies during RMF assessment activities.

Requirements

• An active TOP SECRET clearance is required to start.
• 9 years' experience with a bachelor's degree in engineering, computer science, mathematics or a related field; 7 years' experience with a master's degree; or 13 years' experience in lieu of a degree.
• DoD 8140 certification at IAT Level II / IAM - Level I or higher (Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA) is required at the start.
• Security engineering skills with a working knowledge of cybersecurity technology and DoD/Federal cybersecurity policy (i.e., DoDI 8500.01, NIST SP 800-53).
• Understanding and utilization of Enterprise Mission Assurance Support Service (eMASS).
• Understanding of Risk Management Framework (RMF) Cybersecurity Lifecycle.

Nice-to-haves

• Windows and Red Hat Enterprise Linux (RHEL) system administration skills.
• Previous background working in a virtual environment.
• Previous background working with dockers and containers.
• Administer ACAS and ESS (formerly HBSS).
• Previous experience with ConfigOS.

Benefits

• Generous PTO package with yearly tenure increases
• Flex time policy providing flexibility
• 11 Company-Paid Holidays per year
• Up to 4% match on 401(k) employee contributions, with immediate vesting
• Tuition and Certification Fee Assistance
• Low-cost medical plans including company-sponsored HSA
• No-cost life insurance
• Employee Assistance Program (EAP)