Cybersecurity Engineer

Infinity Systems Engineering Llc; Colorado Springs (CO); On-site; USD 115,000 - 130,000; Full time

Benefits offered by this job

Company culture

Health benefits

Vacation

Wellness

401(k)

Education reimbursement

Profit sharing

Job summary

Infinity Systems Engineering Llc is seeking a Senior Cybersecurity Engineer in Colorado Springs to strengthen cyber resilience across MILSATCOM ground and space systems. You will assess threats, implement RMF controls, and drive hardening of Windows and Red Hat environments while developing recovery plans and TTPs for incident response.

The role requires DoD 8140/8570 IAT II certification and 4–8 years of relevant experience, with hands-on tools like Splunk, Trellix, ACAS, and RMF artifact

Qualifications

• DoD 8140/8570 IAT II certification required.
• 4–8 years of experience with DISA STIGs and SCAP benchmarks.
• 4–8 years administering DISA ACAS.
• 4–8 years using DISA Endpoint Security Solutions (Trellix) or legacy HBSS.
• 4–8 years of secure configuration and hardening of DoD IS.
• Hands-on configuring, troubleshooting, and securing Windows and/or Red Hat servers.
• Experience with RMF security controls.
• Familiarity with NIST 800-30/37/53 CNSSI 1253 overlays.

Responsibilities

• Provide Cyber Systems Security Engineering expertise to MILSATCOM systems.
• Maintain awareness of current cybersecurity threats.
• Assess threats and determine impacts on systems.
• Develop COAs to mitigate threats and prioritize risks.
• Develop recovery procedures to restore operations.
• Support RMF artifacts delivery per contract.
• Perform network vulnerability scans for government checks.
• Maintain the Program Protection Implementation Plan (PPIP).
• Support SAP assessments and cybersecurity meetings.

Skills

DoD 8140/8570 IAT II certification

DISA STIGs

SCAP/Benchmarks

ACAS

Trellix

RMF security controls

NIST 800-30/37/53

CNSSI 1253 overlays

Windows/RedHat hardening

Vulnerability assessment

RMF artifact delivery

Splunk (basic)

ClamAV (basic)

JIRA

Git/GitLab CI/CD

Ansible IaC

Xylok STIG Automation

Education

Bachelor’s Degree in a relevant field

Tools

Trellix

ACAS

Splunk

ClamAV

JIRA

Git

GitLab CI/CD

Ansible

Xylok STIG Tool

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Senior Cybersecurity Engineer

COOLR Full Time Colorado Springs, CO, US

Salary Range: $115,000.00 To $130,000.00 Annually

Infinity’s niche in the aerospace and defense industry is specialized solutions that help bridge the gap between space and ground. This is no small task, and we owe our success to our team who help us fulfill our mission; to match people with their legacies for betterment of the world. There is always a place at Infinity for a motivated, capable individual seeking a career to better the world. We prioritize supporting our team through exceptional benefits, work-life balance, and structured career development. At Infinity, WE ARE MORE – now, come be more with us!

Position Overview

We are seeking a Cyber Security Systems Engineer to join our professional engineering team. This position will support cybersecurity assessments and hardening of operational and support systems to decrease vulnerabilities and increase system and operational resilience. Develop, implement and documentation approaches to satisfy Risk Management Framework requirements.

Primary Responsibilities

Provide Cyber Systems Security Engineering knowledge and expertise to the MILSATCOM systems to:

Maintain awareness of current and emerging Cyber threats

Analyze and assess Cyber threats and determine their impact on the systems

Evaluate how the systems can mitigate Cyber threats and develop Courses of Action (COAs) to mitigate threats and prioritize risks

Develop procedures to counter/mitigate Cyber threats to the Ground Systems, Space Vehicle, and payloads while maintaining the mission to the maximum extent possible

Assist with the development of recovery plans to return the systems to operation

Apply systems engineering and cyber expertise for the development and implementation of mission recovery support Tactics, Techniques, and Procedures (TTPs) in the event of Cyber incidents

Assess software and hardware behaviors due to system modifications and any related expected system impacts

Provide ‘Protected EHF SATCOM’ Cybersecurity Sustaining Engineering support by:

Supporting and implementing intrusion detection solutions and/or systems into the Protected EHF SATCOM system baselines, including but not limited to:

Host-based intrusion detection systems (HIDS)

Intrusion protection systems (IPS), where not covered or inherited by DoD-provided defensive cyber operations (DCO)

Provide System Security Engineering and Cybersecurity support and expertise by:

Preparing, maintaining, and submitting the RMF-artifact delivery schedule (which includes identified RMF package delivery dates) as provided in the prime contractor format

Capturing the status of submission frequency of identified RMF artifacts per system sustainment cybersecurity-related activities in accordance with the contract

Performing network vulnerability scans in support of Government validation checks for CS systems

Maintaining the approved Program Protection Implementation Plan (PPIP)

Supporting Support Security Assessment Plans (SAP)

Providing technical engineering and cyber support for all required cybersecurity technical meetings

Education Requirement:

Bachelor’s Degree in a relevant field; experience will be considered in lieu of degree

Clearance Requirement:

Secret clearance required, TS/SCI desired

Minimum Qualifications

• Must possess a DoD 8140 or 8570 IAT II Certification (e.g., Security+ CE, or higher)
• 4-8 years of experience with DISA STIGs, SCC (SCAP, Benchmarks)
• 4-8 years of experience administering DISA Assured Compliance Assessment Solution (ACAS)
• 4-8 years of experience with DISA Endpoint Security Solutions (Trellix) or legacy Host Based Security System
• 4-8 years of experience with secure configuration and hardening of DoD Information Systems
• 4-8 years of h ands on experience administering configuring, trouble-shooting, and securing Windows Servers and/or RedHat Linux servers and workstations
• Experience with assessing and implementing Risk Management Framework (RMF) security controls
• Familiarity with NIST 800-30, NIST 800-37, NIST 800-53, CNSSI 1253 and associated overlays

Preferred Qualifications

• Hands on experience with implementing and tuning Splunk
• Hands on experience with implementing ClamAV
• Experience with Agile Development Lifecycle, including use of JIRA Project Management Tool
• Experience with Defense Counterintelligence and Security Agency Authorization packages
• Experience with Git source control and Gitlab CI/CD Pipelines
• Experience with Infrastructure as Code (IaC) (Ansible playbooks)
• Experience with Xylok STIG Automation Tool

Infinity Benefits

• Company Culture.Infinity firmly believes that our success is due to the happiness and personal satisfaction of our employees.
• Health Benefits.Infinity covers 100% of the monthly medical and dental premiums for you and your family.
• Rest and Relaxation.Enjoy three weeks of vacation, with the flexibility to use vacation hours in advance before fully accrued.
• Health and Wellness. In addition to vacation, we provide sick leave, plus Flex-Spending Account (FSA) options for medical and dependent care.
• Prepare for the Future. Our 401(k) plan includes company contributions, without requiring matching, along with access to free professional financial planning services.
• Education and Professional Development.We invest in our team’s growth with our Education Reimbursement Program, supporting your career advancement.
• Profit Sharing Plan.Our employees are key to our success, which is why all eligible team members receive an annual payout through our Profit-Sharing Plan.

To learn more about our comp any and benefits, please visit: Infinity Careers

Application Deadline: Applications are anticipated to remain open for a minimum of 4 calendar days from the date this position is posted. The application period may be extended based on recruitment needs. Applicants are encouraged to apply promptly.