Cybersecurity Engineer

Infinity Systems Engineering; Colorado Springs (CO); On-site; USD 105,000 - 120,000; Full time

Benefits offered by this job

Health Benefits

Vacation (3 weeks)

Health & Wellness

401(k) with company contributions

Education Reimbursement

Profit Sharing

Company Culture

Job summary

Infinity Systems Engineering in Colorado Springs is seeking a Cybersecurity Systems Engineer to join our engineering team. This position will support cybersecurity assessments and RMF-based hardening of operational and support systems to decrease vulnerabilities and increase system and operational resilience.

Develop, implement and documentation approaches to satisfy Risk Management Framework requirements. Primary responsibilities include threat assessment, risk prioritization, and implementing

Qualifications

• Bachelor's degree required or equivalent experience.
• DoD 8140/8570 IAT II certification required.
• 2+ years with DISA STIGs, SCC, and ACAS.
• 2+ years in DISA Endpoint Security Solutions (Trellix).
• 2+ years hardening DoD Information Systems and Windows/Linux servers.
• Experience with RMF security controls and NIST guidance.

Responsibilities

• Provide Cyber Systems Security Engineering for MILSATCOM systems.
• Assess threats, determine impacts, and prioritize risks.
• Develop COAs to mitigate cyber threats and recover systems.
• Support RMF artifact delivery and RMF schedule management.
• Implement intrusion detection and defense measures in baselines.
• Conduct vulnerability scans for government validation.
• Assist in mission recovery planning and cyber TTP development.

Skills

Security engineering

Threat analysis

RMF & DoD frameworks

DISA STIGs experience

Windows/Linux hardening

Vulnerability assessment

Education

Bachelor's Degree in a relevant field

Tools

Splunk

ClamAV

JIRA

Git

Gitlab CI/CD

Ansible playbooks

Xylok STIG Automation Tool

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cybersecurity Engineer

COOLR Full Time Colorado Springs, CO, US

Salary Range: $105,000.00 To $120,000.00 Annually

Infinity’s niche in the aerospace and defense industry is specialized solutions that help bridge the gap between space and ground. This is no small task, and we owe our success to our team who help us fulfill our mission of leveraging the strength of our people and our partners to deliver innovative, intelligent solutions that solve complex challenges. There is always a place at Infinity for a motivated, capable individual seeking a career to better the world. We prioritize supporting our team through exceptional benefits, work-life balance, and structured career development. At Infinity, WE ARE MORE – now, come be more with us!

Position OverviewWe are seeking a Cybersecurity Systems Engineer to join our professional engineering team. This position will support cybersecurity assessments and hardening of operational and support systems to decrease vulnerabilities and increase system and operational resilience. Develop, implement and documentation approaches to satisfy Risk Management Framework requirements.

Primary Responsibilities

Provide Cyber Systems Security Engineering knowledge and expertise to the MILSATCOM systems to:

Maintain awareness of current and emerging Cyber threats

Analyze and assess Cyber threats and determine their impact on the systems

Evaluate how the systems can mitigate Cyber threats and develop Courses of Action (COAs) to mitigate threats and prioritize risks

Develop procedures to counter/mitigate Cyber threats to the Ground Systems, Space Vehicle, and payloads while maintaining the mission to the maximum extent possible

Assist with the development of recovery plans to return the systems to operation

Apply systems engineering and cyber expertise for the development and implementation of mission recovery support Tactics, Techniques, and Procedures (TTPs) in the event of Cyber incidents

Assess software and hardware behaviors due to system modifications and any related expected system impacts

Provide ‘Protected EHF SATCOM’ Cybersecurity Sustaining Engineering support by:

Supporting and implementing intrusion detection solutions and/or systems into the Protected EHF SATCOM system baselines, including but not limited to:

Host-based intrusion detection systems (HIDS)

Intrusion protection systems (IPS), where not covered or inherited by DoD-provided defensive cyber operations (DCO)

Provide System Security Engineering and Cybersecurity support and expertise by:

Preparing, maintaining, and submitting the RMF-artifact delivery schedule (which includes identified RMF package delivery dates) as provided in the prime contractor format

Capturing the status of submission frequency of identified RMF artifacts per system sustainment cybersecurity-related activities in accordance with the contract

Performing network vulnerability scans in support of Government validation checks for CS systems

Maintaining the approved Program Protection Implementation Plan (PPIP)

Supporting Support Security Assessment Plans (SAP)

Providing technical engineering and cyber support for all required cybersecurity technical meetings

Qualifications

• Education:Bachelor’s Degree in a relevant field; experience will be considered in lieu of degree
• Required Skills:
• Must possess a DoD 8140 or 8570 IAT II Certification (e.g., Security+ CE, or higher)
• 2+ years of experience with DISA STIGs, SCC (SCAP, Benchmarks)
• 2+ years of experience administering DISA Assured Compliance Assessment Solution (ACAS)
• 2+ years of experience with DISA Endpoint Security Solutions (Trellix) or legacy Host Based Security System
• 2+ years of experience with secure configuration and hardening of DoD Information Systems
• 2+ years of hands on experience administering configuring, trouble-shooting, and securing Windows Servers and/or RedHat Linux servers and workstations
• Experience with assessing and implementing Risk Management Framework (RMF) security controls
• Familiarity with NIST 800-30, NIST 800-37, NIST 800-53, CNSSI 1253 and associated overlays
• Preferred Skills:
  • Hands on experience with implementing and tuning Splunk
  • Hands on experience with implementing ClamAV
  • Experience with Agile Development Lifecycle, including use of JIRA Project Management Tool
  • Experience with Defense Counterintelligence and Security Agency Authorization packages
  • Experience with Git source control and Gitlab CI/CD Pipelines
  • Experience with Infrastructure as Code (IaC) (Ansible playbooks)
  • Experience with Xylok STIG Automation Tool

Infinity Benefits

• Company Culture.Infinity firmly believes that our success is due to the happiness and personal satisfaction of our employees.
• Health Benefits.Infinity covers 100% of the monthly medical and dental premiums for you and your family.
• Rest and Relaxation.Enjoy three weeks of vacation, with the flexibility to use vacation hours in advance before fully accrued.
• Health and Wellness.In addition to vacation, we provide sick leave, plus Flex-Spending Account (FSA) options for medical and dependent care.
• Prepare for the Future.Our 401(k) plan includes company contributions, without requiring matching, along with access to free professional financial planning services.
• Education and Professional Development.We invest in our team’s growth with our Education Reimbursement Program, supporting your career advancement.
• Profit Sharing Plan.Our employees are key to our success, which is why all eligible team members receive an annual payout through our Profit-Sharing Plan.

Anticipated Close Date:Applications are anticipated to remain open for a minimum of 4 calendar days from the date this position is posted. The application period may be extended based on recruitment needs. Applicants are encouraged to apply promptly.