Cybersecurity Engineer III New Colorado Springs, CO

Trace3, Inc.; Colorado Springs (CO); On-site; USD 170,000 - 190,000; Full time

Benefits offered by this job

Medical benefits

401(k) match

Training programs

Snacks and beverages

Work‑life balance

Job summary

Trace3, Inc. is seeking a Cybersecurity Engineer II to serve as a senior technical authority for enterprise security programs, including risk management, secure design, and threat mitigation.

The role guides engineering teams, leadership, and customer stakeholders to implement protective controls across on‑prem, cloud, and hybrid environments. The role emphasizes hands‑on engineering, security architecture, incident response support, and compliance with RMF, NIST CSF, and ISO 27001.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent experience.
• 4–7 years of experience in cybersecurity, information security, systems administration, network engineering, or related technical roles.
• Experience administering or supporting security technologies such as SIEM, endpoint protection, firewalls, identity management, or vulnerability management platforms.
• Working knowledge of network security principles, security architecture concepts, and identity and access management.
• Experience supporting compliance initiatives involving frameworks such as RMF, NIST 800‑53, or NIST CSF.
• Familiarity with security tools including SIEM, EDR, IDS/IPS, PKI, IAM, and vulnerability scanning solutions.
• Experience supporting cloud security initiatives within Microsoft Azure, AWS, or other cloud environments.
• Understanding of security concepts related to virtualization, operating systems, networking, and enterprise infrastructure.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Experience supporting regulated environments, federal government customers, or enterprise organizations is preferred.
• Familiarity with DevSecOps concepts, security automation, and infrastructure security practices.
• Basic scripting or automation experience using PowerShell, Python, Bash, or similar technologies.
• Ability to maintain a Secret clearance.

Responsibilities

• Implement and maintain enterprise security technologies, including firewalls, endpoint protection platforms, identity management solutions, and security monitoring tools.
• Support the deployment and maintenance of security controls across on‑premises, cloud, and hybrid environments.
• Conduct security assessments, vulnerability analyses, and risk evaluations of systems and applications.
• Monitor security events and alerts using Security Information and Event Management (SIEM) platforms.
• Investigate security incidents and support containment, remediation, and recovery activities.
• Assist with threat hunting activities and analysis of indicators of compromise (IOCs).
• Perform vulnerability scanning and track remediation efforts with system owners.
• Support secure configuration management and patch management activities.
• Evaluate technical solutions for security risks and recommend appropriate mitigations.
• Assist engineering teams with integrating security controls into system architectures and platform deployments.
• Contribute to the development and maintenance of security documentation, procedures, and technical standards.
• Support compliance efforts related to regulatory, contractual, and organizational security requirements.
• Participate in security audits, assessments, and authorization activities.
• Assist with implementation and maintenance of cybersecurity frameworks, including: NIST CSF, NIST SP 800-53, ISO/IEC 27001.
• Provide technical input during cybersecurity reviews, design discussions, and engineering planning activities.

Skills

Security architecture

SIEM

Endpoint protection

Identity management

Vulnerability management

NIST RMF

Cloud security

PowerShell/Python

DevSecOps

Secret clearance

Education

Bachelor's degree in Cybersecurity/CS/IS/Engineering

Tools

EDR

IDS/IPS

PKI

IAM

Vulnerability scanners

Firewalls

Job description

Job Summary

The Cybersecurity Engineer II serves as the senior technical authority for enterprise, mission, and federal cybersecurity programs, providing deep expertise across security architecture, cyber defense operations, risk management, compliance frameworks, secure system design, and threat mitigation. The Cybersecurity Engineer III ensures systems, network, and applications meet stringent security requirements while guiding engineering teams, leadership, and customer stakeholders.

SUMMARY OF ESSENTIAL JOB FUNCTIONS

• Implement and maintain enterprise security technologies, including firewalls, endpoint protection platforms, identity management solutions, and security monitoring tools.
• Support the deployment and maintenance of security controls across on‑premises, cloud, and hybrid environments.
• Conduct security assessments, vulnerability analyses, and risk evaluations of systems and applications.
• Monitor security events and alerts using Security Information and Event Management (SIEM) platforms.
• Investigate security incidents and support containment, remediation, and recovery activities.
• Assist with threat hunting activities and analysis of indicators of compromise (IOCs).
• Perform vulnerability scanning and track remediation efforts with system owners.
• Support secure configuration management and patch management activities.
• Evaluate technical solutions for security risks and recommend appropriate mitigations.
• Assist engineering teams with integrating security controls into system architectures and platform deployments.
• Contribute to the development and maintenance of security documentation, procedures, and technical standards.
• Support compliance efforts related to regulatory, contractual, and organizational security requirements.
• Participate in security audits, assessments, and authorization activities.
• Assist with implementation and maintenance of cybersecurity frameworks, including:
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-53
• ISO/IEC 27001
• Provide technical input during cybersecurity reviews, design discussions, and engineering planning activities.

REQUIRED SKILLS AND EXPERIENCE

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent experience.
• 4–7 years of experience in cybersecurity, information security, systems administration, network engineering, or related technical roles.
• Experience administering or supporting security technologies such as SIEM, endpoint protection, firewalls, identity management, or vulnerability management platforms.
• Working knowledge of network security principles, security architecture concepts, and identity and access management.
• Experience supporting compliance initiatives involving frameworks such as RMF, NIST 800‑53, or NIST CSF.
• Familiarity with security tools including SIEM, EDR, IDS/IPS, PKI, IAM, and vulnerability scanning solutions.
• Experience supporting cloud security initiatives within Microsoft Azure, AWS, or other cloud environments.
• Understanding of security concepts related to virtualization, operating systems, networking, and enterprise infrastructure.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Experience supporting regulated environments, federal government customers, or enterprise organizations is preferred.
• Familiarity with DevSecOps concepts, security automation, and infrastructure security practices.
• Basic scripting or automation experience using PowerShell, Python, Bash, or similar technologies.
• Ability to maintain a Secret clearance.

Certifications (Preferred)

• Security+
• CySA+
• GSEC
• Azure Security Engineer Associate
• AWS Security Specialty
• Existing or the ability to obtain a Secret security clearance.

PHYSICAL DEMANDS

• Remain in a stationary position for extended periods.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and ability to adjust focus.

WORK ENVIRONMENT

This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.

COMPENSATION

Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. Salary range: $170,000 – $190,000 USD. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.

BENEFITS

• Comprehensive medical, dental and vision plans for you and your dependents
• 401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long‑Term Disability
• Competitive Compensation
• Training and development programs
• Major offices stocked with snacks and beverages
• Collaborative and inclusive culture
• Work‑life balance and generous paid time off

Equal Opportunity Employer

As an equal opportunity employer, Trace3 bases all employment decisions on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age, disability, genetic information, or any other characteristic protected by federal, state, or local law.

Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.