Cyber Security Engineer

Vanguard Defense Solutions; Colorado Springs (CO); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health insurance

401(k) plan with Safe Harbor employer

Paid time off 120 hours per year + 11‑

Long-term disability

Job summary

Vanguard Defense Solutions in Colorado Springs, CO seeks a Cyber Security Engineer to support the Missile Defense Agency under the AIMSS program, serving as an Information System Security Officer (ISSO) for MDA enclaves and systems and owning RMF packages and continuous monitoring.

The role requires implementing RMF per NIST guidelines, developing System Security Plans, and performing vulnerability analyses. On-site work at a government facility is required.

Qualifications

• Must hold DoD 8570.01-M / 8140 IAM Level II baseline certification (e.g., Security+ CE)
• Experience implementing RMF and interpreting NIST SP 800-53 Rev 5 controls
• Background in Windows, Linux server administration or similar environments

Responsibilities

• Serve as ISSO for MDA enclaves and systems
• Implement RMF per NIST SP 800-37; assess controls per NIST SP 800-53 Rev 5
• Develop and maintain System Security Plans and ROE/POA&Ms in eMASS
• Track POA&Ms and remediation milestones
• Conduct vulnerability scanning (ACAS/Nessus) and drive STIG compliance
• Prepare waivers or risk exceptions when remediations are not possible
• Maintain continuous monitoring and brief cybersecurity posture to stakeholders
• Ensure compliance with FISMA, NIST, DoD, and MDA policies

Skills

ISSO duties

RMF implementation

NIST RMF framework

Vulnerability assessment

ACAS/Nessus

eMASS

Patching & STIGs

Education

DoD 8570.01-M / 8140 IAM Level II baseline certification

Tools

ACAS

eMASS

Tanium

Trellix

STIG Viewer

Windows Admin

Linux Admin

Job description

Colorado Springs, CO (government facility, on-site) · Full-time · Active Secret clearance required

Serve as an Information System Security Officer (ISSO) for Missile Defense Agency enclaves and systems under the AIMSS program, owning their RMF packages and continuous monitoring.

Vanguard Defense Solutions is seeking a Cyber Security Engineer to support the Missile Defense Agency (MDA) under the Agency Information Management and Software Services (AIMSS) program. You will serve as an Information System Security Officer (ISSO) for MDA enclaves and systems, owning their Risk Management Framework (RMF) packages and continuous monitoring from day to day. Candidates already supporting MDA cybersecurity are strongly encouraged to apply.

Position Summary

Oversees the implementation of DoDD 8530.1, DoDD 8500.2, DoDI 8510.1, DoDI 8510.01, Risk Management Framework, and other applicable NIST and CNSS IA directives, instructions, and guidelines, to include interfacing with MDA Information Assurance management and case managers. Designs, develops, and implements solutions that meet network and system security requirements and performs vulnerability and risk analyses of computer systems, networks, and applications. Leads the implementation of required network security to safeguard computer systems, networks, and data in accordance with current policies and regulations.

Assesses the security risks of IT systems, networks, and software applications and documents them in formal security and risk assessments and supporting artifacts for the MDA Authorizing Official and Security Control Assessor process. Provides insight into cyber policy and technical decisions. Tests to validate established security requirements, recommends additional safeguards, supports formal testing required by government accrediting authorities, and prepares System Security Plans.

This role is on-site at a government facility in Colorado Springs, CO.

Key Responsibilities

• Serve as primary or secondary ISSO for assigned MDA enclaves and systems
• Implement RMF in accordance with NIST SP 800-37 and assess security controls against NIST SP 800-53 Rev 5
• Develop and maintain System Security Plans, contingency plans, security checklists, Privacy Impact Assessments, and ATO packages in eMASS
• Create and track Plans of Action and Milestones (POA&Ms), with monthly updates through remediation
• Run and analyze vulnerability scans using ACAS/Nessus, and drive patching and STIG compliance with system administrators
• Prepare waivers and risk exceptions for vulnerabilities that cannot be remediated
• Maintain continuous monitoring of assigned systems and brief cyber posture to technical and non-technical stakeholders
• Ensure compliance with FISMA, NIST, DoD, and MDA cybersecurity policy

Required Qualifications

• 0 to 10 years of relevant experience
• DoD 8570.01-M / 8140 IAT or IAM Level II baseline certification (for example, Security+ CE)

Preferred Qualifications

• Experience as an ISSO on Missile Defense Agency or other DoD systems
• Hands-on experience with eMASS and ACAS, including ACAS Operator certification
• Systems administration background in Windows, Windows Server, and Linux environments
• Familiarity with STIG Viewer, Tanium, Trellix, or similar endpoint security tools
• CGRC (formerly CAP) or equivalent RMF-focused certification, earned or in progress
• COMSEC custodial experience
• Medical, dental, and vision insurance through Blue Cross and Blue Shield of Alabama
• 401(k) plan with a Safe Harbor employer contribution
• 120 hours of paid time off per year, plus 11 paid federal holidays
• Company-paid long-term disability and group term life coverage, with optional voluntary life and accident coverage

Why Vanguard

We are deliberately small. Every team member has a visible role in the quality and integrity of what we deliver to our government customers, and engineers here own real scope rather than a slice of someone else's. You get direct access to company leadership, on a team small enough that your work is visible without having to campaign for it.

Export control: this position may require access to information subject to U.S. export control regulations. Employment is contingent on the company verifying the successful applicant's U.S.-person status, or obtaining any required export license or confirming that a license exception applies.