Cybersecurity Engineer III

Trace3; Colorado Springs (CO); On-site; USD 170,000 - 190,000; Full time

Benefits offered by this job

Comprehensive benefits

401(k) matching

Training programs

Work-life balance

Collaborative culture

Generous PTO

Job summary

Trace3 is seeking a Cybersecurity Engineer II/III to act as a senior technical authority for enterprise and federal cybersecurity programs. You will guide architecture, risk management, and threat mitigation while ensuring security controls across on-premises, cloud, and hybrid environments.

The role involves a mission-focused project refreshing CCIC2S Oracle and RHEL environments, with initial duties at North Colorado Springs and occasional travel to Chidlaw and Peterson AFB.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science or related field or equivalent experience.
• 4–7 years in cybersecurity or related technical roles.
• Experience with SIEM, endpoint protection, firewalls, IAM or vulnerability management.
• Knowledge of RMF, NIST 800-53, NIST CSF or similar standards.
• Cloud security exposure in Azure/AWS preferred.

Responsibilities

• Implement and maintain enterprise security technologies and monitoring tools.
• Support security controls across on-prem, cloud, and hybrid environments.
• Conduct security assessments, vulnerability analyses, and risk evaluations.
• Monitor SIEM events and assist with incident containment and remediation.
• Assist with threat hunting and IOC analysis, and patch management.
• Support DevSecOps, automation, and secure system architectures.

Skills

Security engineering

Threat analysis

SIEM administration

Endpoint protection

Identity management

Vulnerability management

Cloud security (Azure/AWS)

Scripting (PowerShell/Python)

Regulatory compliance (RMF/NIST CSF)

Education

Bachelor's degree in Cybersecurity/CS/Engineering or related field

Tools

SIEM

EDR

IDS/IPS

PKI

IAM

Vulnerability scanning

Job description

JOB SUMMARY

The Cybersecurity Engineer II serves as the senior technical authority for enterprise, mission, and federal cybersecurity programs. This role provides deep expertise across security architecture, cyber defense operations, risk management, compliance frameworks, secure system design, and threat mitigation. The Cybersecurity Engineer III ensures systems, networks, and applications meet stringent security requirements while guiding engineering teams, leadership, and customer stakeholders.

The Cybersecurity Engineer III works closely with infrastructure, cloud, and application teams to ensure that security controls are integrated across enterprise environments and aligned with industry standards and regulatory requirements.

This project delivers a mission‑assured technical refresh of the CCIC2S Oracle database and RHEL operating environments, upgrading legacy systems to Oracle 19c and RHEL 9.7 while preserving full operational continuity. It includes comprehensive engineering, integration, cybersecurity, testing, and deployment activities to ensure zero data loss, improved performance, strengthened security, and seamless compatibility across all CCIC2S mission systems. Location will be North Colorado Springs initially and future work at Chidlaw and Peterson AFB occasionally.

SUMMARY OF ESSENTIAL JOB FUNCTIONS

• Implement and maintain enterprise security technologies, including firewalls, endpoint protection platforms, identity management solutions, and security monitoring tools.
• Support the deployment and maintenance of security controls across on‑premises, cloud, and hybrid environments.
• Conduct security assessments, vulnerability analyses, and risk evaluations of systems and applications.
• Monitor security events and alerts using Security Information and Event Management (SIEM) platforms.
• Investigate security incidents and support containment, remediation, and recovery activities.
• Assist with threat hunting activities and analysis of indicators of compromise (IOCs).
• Perform vulnerability scanning and track remediation efforts with system owners.
• Support secure configuration management and patch management activities.
• Evaluate technical solutions for security risks and recommend appropriate mitigations.
• Assist engineering teams with integrating security controls into system architectures and platform deployments.
• Contribute to the development and maintenance of security documentation, procedures, and technical standards.
• Support compliance efforts related to regulatory, contractual, and organizational security requirements.
• Participate in security audits, assessments, and authorization activities.
• Assist with implementation and maintenance of cybersecurity frameworks, including:
• NIST Cybersecurity Framework (CSF)
• NIST SP 800‑53
• Risk Management Framework (RMF)
• ISO/IEC 27001
• Provide technical input during cybersecurity reviews, design discussions, and engineering planning activities.

REQUIRED SKILLS AND EXPERIENCE

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline, or equivalent experience.
• 4–7 years of experience in cybersecurity, information security, systems administration, network engineering, or related technical roles.
• Experience administering or supporting security technologies such as SIEM, endpoint protection, firewalls, identity management, or vulnerability management platforms.
• Working knowledge of network security principles, security architecture concepts, and identity and access management.
• Experience supporting compliance initiatives involving frameworks such as RMF, NIST 800‑53, NIST CSF, or similar standards.
• Familiarity with security tools including SIEM, EDR, IDS/IPS, PKI, IAM, and vulnerability scanning solutions.
• Experience supporting cloud security initiatives within Microsoft Azure, AWS, or other cloud environments.
• Understanding of security concepts related to virtualization, operating systems, networking, and enterprise infrastructure.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Experience supporting regulated environments, federal government customers, or enterprise organizations is preferred.
• Familiarity with DevSecOps concepts, security automation, and infrastructure security practices.
• Basic scripting or automation experience using PowerShell, Python, Bash, or similar technologies.
• Ability to maintain a Secret clearance.

Relevant certifications are preferred, including:

• Security+
• CySA+
• GSEC
• Azure Security Engineer Associate
• AWS Security Specialty
• Ability to obtain and maintain a Secret security clearance; existing clearance preferred.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.

WORK ENVIRONMENT

This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.

Salary and Benefits

Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.

Estimated Pay Range: $170,000 – $190,000 USD

THE PERKS

• Comprehensive medical, dental and vision plans for you and your dependents
• 401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long‑Term Disability
• Competitive Compensation
• Training and development programs
• Major offices stocked with snacks and beverages
• Collaborative and cool culture
• Work‑life balance and generous paid time off

Our Commitment

At the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.

We’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.

As an equal opportunity employer, Trace3 bases all employment decisions on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.

Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.

If you require a reasonable accommodation to complete the application process or participate in an interview, please email [e-mail].

To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.