Cyber Security Engineer

Vanguard Defense Solutions, Inc.; Colorado Springs (CO); Presencial; USD 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

401(k) plan with Safe Harbor

120 hours of paid time off per year

Company-paid long-term disability and

Descripción de la vacante

Vanguard Defense Solutions, Inc. seeks a Cyber Security Engineer to serve as an Information System Security Officer (ISSO) for Missile Defense Agency enclaves in Colorado Springs, overseeing RMF packages and continuous monitoring.

The role focuses on implementing security controls and supporting ATO processes. Responsibilities include developing System Security Plans, conducting risk assessments, coordinating with authorities, and ensuring compliance with DoD/NIST policies.

Formación

• Bachelor's degree in a relevant field.
• 0 to 10 years of relevant experience.
• DoD 8570.01-M / 8140 IAT or IAM Level II baseline certification (e.g., Security+ CE).
• Active Secret clearance.

Responsabilidades

• Serve as primary or secondary ISSO for assigned MDA enclaves and systems.
• Implement RMF in accordance with NIST SP 800-37 and assess security controls against NIST SP 800-53 Rev 5.
• Develop and maintain System Security Plans, contingency plans, security checklists, and ATO packages in eMASS.
• Create and track Plans of Action and Milestones (POA&Ms) with monthly updates through remediation.
• Run and analyze vulnerability scans using ACAS/Nessus and drive patching and STIG compliance.
• Prepare waivers and risk exceptions for vulnerabilities that cannot be remediated.
• Maintain continuous monitoring of assigned systems and brief cyber posture to stakeholders.
• Ensure compliance with FISMA, NIST, DoD, and MDA cybersecurity policy.

Conocimientos

ISSO duties

RMF/NIST compliance

Vulnerability management

DoD cybersecurity policy

Windows/Linux administration

Educación

Bachelor's degree

Herramientas

ACAS

eMASS

Tanium

STIGs

Nessus

Descripción del empleo

Vanguard Defense Solutions is seeking a Cyber Security Engineer to support the Missile Defense Agency (MDA) under the Agency Information Management and Software Services (AIMSS) program. You will serve as an Information System Security Officer (ISSO) for MDA enclaves and systems, owning their Risk Management Framework (RMF) packages and continuous monitoring from day to day. Candidates already supporting MDA cybersecurity are strongly encouraged to apply.

Application deadline: Monday, November 2, 2026

Position Summary

Oversees the implementation of DoDD 8530.1, DoDD 8500.2, DoDI 8510.1, DoDI 8510.01, Risk Management Framework, and other applicable NIST and CNSS IA directives, instructions, and guidelines, to include interfacing with MDA Information Assurance management and case managers. Designs, develops, and implements solutions that meet network and system security requirements and performs vulnerability and risk analyses of computer systems, networks, and applications. Leads the implementation of required network security to safeguard computer systems, networks, and data in accordance with current policies and regulations.

Assesses the security risks of IT systems, networks, and software applications and documents them in formal security and risk assessments and supporting artifacts for the MDA Authorizing Official and Security Control Assessor process. Provides insight into cyber policy and technical decisions. Tests to validate established security requirements, recommends additional safeguards, supports formal testing required by government accrediting authorities, and prepares System Security Plans.

This role is on-site at a government facility in Colorado Springs, CO.

Key Responsibilities

• Serve as primary or secondary ISSO for assigned MDA enclaves and systems
• Implement RMF in accordance with NIST SP 800-37 and assess security controls against NIST SP 800-53 Rev 5
• Develop and maintain System Security Plans, contingency plans, security checklists, Privacy Impact Assessments, and ATO packages in eMASS
• Create and track Plans of Action and Milestones (POA&Ms), with monthly updates through remediation
• Run and analyze vulnerability scans using ACAS/Nessus, and drive patching and STIG compliance with system administrators
• Prepare waivers and risk exceptions for vulnerabilities that cannot be remediated
• Maintain continuous monitoring of assigned systems and brief cyber posture to technical and non-technical stakeholders
• Ensure compliance with FISMA, NIST, DoD, and MDA cybersecurity policy

Required Qualifications

• Bachelor's degree
• 0 to 10 years of relevant experience
• DoD 8570.01-M / 8140 IAT or IAM Level II baseline certification (for example, Security+ CE)
• Active Secret clearance

Preferred Qualifications

• Experience as an ISSO on Missile Defense Agency or other DoD systems
• Hands-on experience with eMASS and ACAS, including ACAS Operator certification
• Systems administration background in Windows, Windows Server, and Linux environments
• Familiarity with STIG Viewer, Tanium, Trellix, or similar endpoint security tools
• CGRC (formerly CAP) or equivalent RMF-focused certification, earned or in progress
• COMSEC custodial experience

Benefits

• Medical, dental, and vision insurance through Blue Cross and Blue Shield of Alabama
• 401(k) plan with a Safe Harbor employer contribution
• 120 hours of paid time off per year, plus 11 paid federal holidays
• Company-paid long-term disability and group term life coverage, with optional voluntary life and accident coverage

Why Vanguard

We are deliberately small. Every team member has a visible role in the quality and integrity of what we deliver to our government customers, and engineers here own real scope rather than a slice of someone else's. You get direct access to company leadership, on a team small enough that your work is visible without having to campaign for it.

Export control: this position may require access to information subject to U.S. export control regulations. Employment is contingent on the company verifying the successful applicant's U.S.-person status, or obtaining any required export license or confirming that a license exception applies.