Information Systems Security EngineerColorado Springs, CO

BuddoBot Inc.; Colorado Springs (CO); On-site; USD 135,000 - 155,000; Full time

Job summary

Dark Wolf is actively seeking an Information Systems Security Engineer (ISSE) to support RMF assessments and A&A packages for DoD customers. The role focuses on building secure architectures, conducting vulnerability assessments, and ensuring compliance with RMF controls.

On-site in Colorado Springs with remote opportunities. Required: 9+ years with LogRhythm SIEM, DoD 8570/8140 IAT II, and DoD RMF/A&A experience; Top Secret/SCI eligible; strong communication and client interaction skills.

Qualifications

• 9+ years of relevant experience with LogRhythm SIEM.
• CompTIA Security+ or equivalent IAT Level II DoD 8570 certification.
• Experience as an RMF Engineer, ISSM/ISSO, Security Controls Validator, and/or information assurance engineer.
• 6+ years Cybersecurity compliance experience.
• 6+ years of ATO accreditation experience.
• ACAS experience (Nessus / Tenable Security Center).
• Experience with Nessus/Tenable Security Center, STIG Viewer, and EvaluateSTIG for RMF assessments and compliance audits.
• Ability to clearly articulate ideas for executive level consumption.
• Ability to use prior experience and knowledge to address new situations; especially during interactions with clients.
• Ability to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions.
• B.A. or B.S. Information Security, Computer Science or related discipline.
• US Citizenship and have Secret security clearance with eligibility to the Top Secret/SCI level

Responsibilities

• Build security architectures, integrate new architectural features into existing infrastructures, design cybersecurity architectural artifacts, and provide engineering recommendations to resolve integration and testing issues.
• Develop cyber requirements to DoD 8570/8140 standards.
• Perform vulnerability assessments and compliance audits, triage and prioritize findings, design remediation solutions, and apply fixes to bring systems into compliance with RMF controls and enclave policy.
• Assess RMF artifacts and identify deviations from RMF control requirements.
• Establish program control processes covering certification testing, compliance documentation, investigations, software research, hardware introduction and release, inspections, and periodic audits to support system assessment and authorization.

Skills

LogRhythm SIEM

RMF engineering

ISSM/ISSO

Security Controls Validator

ATO accreditation

Nessus/Tenable

STIG Viewer

EvaluateSTIG

executive communication

client interaction

Education

Bachelor's degree in Information Security or Computer Science

Tools

Nessus/Tenable Security Center

STIG Viewer

EvaluateSTIG

ACAS

Job description

Dark Wolf is seeking an Information Systems Security Engineer (ISSE) to support a collaborative team to develop, manage, and maintain information system security Assessment and Authorization (A&A) packages for the US Space Force GBR Maintenance and Sustainment Services (GMASS). This role supports the constellation of radar technology that protects our nation from ballistic missile attacks launched by adversarial governments. This could include supporting the planning, executing, and monitoring of the seven step RMF process for our customer. This position will be primarily on-site in Colorado Springs, CO with remote opportunities. Candidates must be located physically in Colorado Springs or the surrounding areas.

Key Responsibilities

• Build security architectures, integrate new architectural features into existing infrastructures, design cybersecurity architectural artifacts, and provide engineering recommendations to resolve integration and testing issues.
• Develop cyber requirements to DoD 8570/8140 standards.
• Perform vulnerability assessments and compliance audits, triage and prioritize findings, design remediation solutions, and apply fixes (configuration changes, system hardening, patching) to bring systems into compliance with RMF controls and enclave policy
• Assess RMF artifacts and identify deviations from RMF control requirements.
• Establish program control processes covering certification testing, compliance documentation, investigations, software research, hardware introduction and release, inspections, and periodic audits to support system assessment and authorization.

Required Qualifications

• 9+ years of relevant experience with LogRhythm SIEM
• CompTIA Security+ or equivalent IAT Level II DoD 8570 certification.
• Experience as an RMF Engineer, ISSM/ISSO, Security Controls Validator, and/or information assurance engineer
• 6+ years Cybersecurity compliance experience
• 6+ years of ATO accreditation experience
• ACAS experience (Nessus / Tenable Security Center).
• Experience with Nessus/Tenable Security Center, STIG Viewer, and EvaluateSTIG for RMF assessments and compliance audits.
• Ability to clearly articulate ideas for executive level consumption
• Ability to use prior experience and knowledge to address new situations; especially during interactions with clients
• Ability to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions
• B.A. or B.S. Information Security, Computer Science or related discipline
• US Citizenship and have Secret security clearance with eligibility to the Top Secret/SCI level

Desired Qualifications

• Previous experience supporting Department of Defense RMF processes
• RHEL system administration and hardening experience in an on-premises environment.
• Scripting experience to support remediation and configuration tasks (e.g., Bash, Python).
• Experience supporting assessment and authorization (A&A) of DoW systems.
• Experience with enclave and network security within classified environments.

This position is located in Colorado Springs, CO. The estimated salary range for this position is $135,000.00 - $155,000.00, commensurate on experience and technical skillset.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.