Cybersecurity Engineer

Sierra Space Corporation; Louisville (KY); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical Coverage

Dental Coverage

Vision Coverage

401K Profit Sharing Plan

Life and AD&D Insurance

Disability Insurance

Employee Assistance Program

Professional Development / Educational

Pre-tax spending accounts

Job summary

Sierra Space Corporation seeks a Cybersecurity Engineer III to design, implement, and sustain advanced vulnerability management across on‑prem and cloud environments. You will lead remediation, analyze scan results, and drive risk-based decision making with cross‑functional teams.

The role emphasizes automation, reporting, and staying ahead of threats, with a focus on maintaining secure enterprise systems and compliance readiness.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 5+ years of related cybersecurity experience.
• Experience operating enterprise vulnerability management programs.

Responsibilities

• Design, implement, and maintain advanced vulnerability management controls.
• Coordinate remediation across infrastructure, endpoints, apps, cloud, and network.
• Analyze scan results, prioritize remediation using risk-based methods.
• Develop automation to improve scanning, reporting, and remediation verification.
• Provide guidance on remediation options and risk acceptance.

Skills

Vulnerability management

Security architecture

Threat intelligence

Automation scripting

Team leadership

Education

Bachelor’s degree in a related field

Tools

Tenable

Qualys

Rapid7

SIEM

CMDB

Orchestration

Job description

We’re looking for team members who align with our values, mission and goals – while also meeting the minimum qualifications below.

The preferred qualifications are a bonus, not a requirement. We seek individuals who are passionate about innovating beyond boundaries and relentlessly pursuing solutions that protect, preserve and empower – to join us in this critical mission.

• The Cybersecurity Engineer III is responsible for designing, implementing, and maintaining advanced security measures to protect the organization’s information systems
• This role involves working with various security technologies, including encryption, intrusion detection/prevention systems (IDS/IPS), and multi-factor authentication
• They will have extensive knowledge of secure systems architecture, emerging technologies, threats, and regulatory requirements
• The Cybersecurity Engineer III will work closely with senior engineers and cross-functional teams to ensure the security and integrity of the organization’s information systems
• This position offers the opportunity to work on complex security projects, stay updated with the latest industry trends, and contribute to the continuous improvement of the organization’s security posture
• Support the enterprise vulnerability management program across infrastructure, endpoints, applications, cloud environments, and network devices
• Develop and maintain vulnerability scanning strategies, schedules, configurations, coverage metrics, and operating procedures
• Analyze vulnerability scan results and threat intelligence to validate findings, assess exploitability and business impact, and prioritize remediation using a risk-based approach
• Coordinate with infrastructure, application, cloud, network, and business teams to assign, track, and verify remediation activities within established service-level targets
• Provide technical guidance on remediation options, compensating controls, exception requests, and risk acceptance decisions
• Monitor vulnerability management dashboards, trends, and key performance indicators; prepare clear executive and technical reports on exposure, remediation progress, and residual risk
• Investigate discrepancies in scan coverage, vulnerability data, and remediation status to improve the accuracy and completeness of enterprise reporting
• Integrate vulnerability management processes and data with asset management, configuration management, ticketing, SIEM, GRC, and other security platforms
• Support vulnerability assessments, penetration testing, compliance assessments, and audits by providing evidence, technical analysis, and remediation status
• Develop scripts, workflows, and other automation to improve scanning, data analysis, ticket creation, reporting, and remediation verification
• Stay current on emerging vulnerabilities, exploitation trends, security advisories, and defensive technologies, and communicate relevant risks and recommended actions to stakeholders

Benefits

• Medical Coverage: We offer two comprehensive medical plans, a PPO and an HDHP, designed to prioritize the well-being of our team members
• Dental Coverage: HMO and PPO dental plans are aimed at promoting optimal oral health and reducing costs
• Vision Coverage: Our vision plan offers access to a wide range of in-network and out-of-network providers
• Flexible Spending Accounts: Maximize savings and use pre-tax dollars to pay for medical and dependent care expenses
• Health Savings Account: This tax-advantaged savings account allows team members to set aside pre-tax funds to cover qualified medical expenses
• Life and AD&D Insurance: Comprehensive Basic and Supplemental Life and Accidental Death and Dismemberment (AD&D) insurance offers financial protection to your family
• Disability Insurance: Short-term and long-term disability insurance provides wage replacement should you suffer a disability that prevents you from working
• 401K Profit Sharing Plan: Employees may contribute 1% to 100% of base salary up to the annual IRS maximum. Employer match provided with a 5-year vesting schedule
• Employee Assistance Program: Confidential service available 24/7 that provides assessment, counseling, resources and referrals to employees
• Professional Development / Educational Reimbursement Plan: Reimbursement for undergraduate and graduate tuition, books and fees.

• Typically 5+ years of related experience.
• Knowledge of secure systems architecture.
• Knowledge of one or more: emerging technologies, emerging threats, emerging regulatory requirements.
• Certifications: (1 or more required) GIAC (Global Information Assurance Certification), network technology certifications such as a CCNP (Cisco Certified Network Professional), or SANS level 300 courses.
• Requires Bachelor’s degree in a related field (or equivalent work experience in lieu of degree or Masters +3 years experience).
• Ability to obtain and maintain a U.S. security clearance.
• Demonstrated experience operating or engineering an enterprise vulnerability management program across diverse technology environments.
• Hands-on experience with vulnerability assessment and management platforms such as Tenable, Qualys, Rapid7, or equivalent tools.
• Experience developing risk-based vulnerability prioritization methods using severity, exploitability, asset criticality, threat intelligence, and business impact.
• Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, and third-party teams in a large or complex enterprise.
• Experience with vulnerability exception management, compensating controls, risk management, remediation validation, and service-level reporting.
• Proficiency with asset discovery, inventory reconciliation, scan configuration, credentialed scanning, authenticated assessment, and vulnerability data quality management.
• Experience integrating vulnerability management platforms with ticketing, CMDB, SIEM, GRC, orchestration, or reporting systems.
• Experience translating vulnerability data into executive-level risk reporting, dashboards, metrics, and actionable remediation plans.
• Knowledge of common vulnerability scoring and prioritization standards, including CVE, CVSS, CWE, CISA KEV, and related threat intelligence sources.
• Certifications such as CISSP, CISM, CISA, CCSP, GIAC, or a vulnerability-management-related certification.
• Strong technical leadership, communication, analytical, project management, and mentoring skills.