Sr Cybersecurity Engineer

Sierra Nevada Corp; Lone Tree (CO); On-site; USD 120,000 - 170,000; Full time

Job summary

Sierra Nevada Corp in Colorado is seeking a Senior Cybersecurity Engineer to lead the design, testing, and implementation of secure OS, networks, and monitoring tools.

You will manage IT security systems, drive incident responses, perform risk assessments, and develop comprehensive security controls while integrating cutting-edge tools across the security infrastructure.

Qualifications

• Bachelor's degree in Cybersecurity, IT, or related field.
• 8+ years in a related security role with leadership.
• Experience with NIST SP 800-171, CMMC guidance.
• Deep understanding of cybersecurity principles and networks.

Responsibilities

• Platform Ownership: manage security operations platforms and optimize performance.
• Architectural Alignment: ensure platforms meet architectural requirements and mitigate risks.
• Zero Trust Alignment: advance Zero Trust posture across devices, networks, workloads, and data.
• Standardization: document security control standards and roadmaps for improvements.
• Risk Management: assess risks and design compensating controls with documentation.
• Mentoring: coach junior engineers on advanced security practices.
• Collaboration: work with cross-functional teams and leadership to integrate security.

Skills

Zero Trust

Security monitoring

Network architectures

Incident response

Leadership

OS administration

Threat analysis

Education

Bachelor's degree in Cybersecurity/IT

Tools

NIST SP 800-171

Job description

If you like solving complex IT problems using your deep analytical skills, this is the opportunity for you! The Senior Cybersecurity Engineer will spearhead the design, testing, and implementation of secure operating systems, networks, and security monitoring tools. This expert-level role entails managing IT security systems, leading incident responses, conducting thorough risk assessments, and developing comprehensive security controls. The Senior Engineer will also drive the research and integration of cutting-edge security tools and technologies to enhance the company's security infrastructure.

As SNC's corporate team, we provide the company and its business areas with strategic direction and business support spanning executive management, finance and accounting, operations, human resources, legal, IT, information security, facilities, marketing, and communications.

Responsibilities

• Platform Ownership. Manage and own continuous improvement of a portfolio of security operations platforms, including enterprise logging and detection platforms consumed by security operations analysts. Partner with security operations analysts to optimize platform performance and effectiveness.
• Architectural Alignment. Partner with the Principal Architect to ensure the enterprise security platforms/tools portfolio meets architectural requirements and effectively mitigates enterprise security risks, including coverage and gap analysis, dependency management, and capability planning.
• Zero Trust Alignment. Support enterprise security engineering alignment with Zero Trust principals and continuous maturity of Zero Trust posture through delivery of device, network, workload, and data security controls.
• Standardization and Continuous Improvement. Work with junior engineers to develop and document security control standards, tool management standards, and continuous improvement roadmaps to ensure effective platform management and ongoing optimization of enterprise security controls.
• Risk Management. Analyze, assess, and advise on risk treatment for identified enterprise security risks including design and implementation of technical controls, compensating control identification, and documentation.
• Controls and compliance evidence. Develop and implement security controls mapped to NIST SP 800-171, CMMC, and local security policy requirements. Provide technical evidence and design documentation to support audits and assessments.
• Mentoring. Mentor and coach junior engineers on advanced security practices, platform maturity, and strategic thinking.
• Collaboration. Collaborate with cross-functional teams and senior leadership to ensure robust security integration across all IT projects.

Qualifications You Must Have

• Bachelor's degree in Cybersecurity, Network Engineering, Information Technology or related Engineering field of study
• 8+ years of experience in a related role.
• Relevant experience can be considered as a substitute for the required educational qualifications. In the absence of a degree, a minimum of 12 years of related experience is required.
• Higher level relevant degree may substitute for experience.
• Deep and extensive understanding of cybersecurity principles and network architectures.
• Proven leadership experience with security monitoring and assessment tools.
• Demonstrated experience supporting, troubleshooting, and administering a variety of networks, Operating Systems (OSs), and applications.
• Expert knowledge of data security administration principles, methods, and techniques.
• Strong knowledge and experience administering a variety of current Microsoft platforms.
• Advanced understanding of domain structures, user authentication, and digital signatures.
• Hands-on engineering experience in a zero trust architecture environment, focused on security operations platforms including network detection and response, endpoint protection, and data security.
• Demonstrated ability to work with a security architect or senior technical leader and engineer the solutions they present, taking architecture direction through design, implementation, and documentation.

Qualifications We Prefer

• Advanced technical security certifications such as ISC2 Certified Information Systems Security Professional (CISSP), CompTIA Certified Advanced Security Practitioner (CASP+)/SecurityX, or GIAC certifications
• Expert knowledge of how enterprise security platforms orchestrate to support security operations requirements, including demonstrated experience maturing and optimizing enterprise security platforms
• Demonstrated success in defining and leading implementation of platform management standards and requirements
• Demonstrated experience implementing infrastructure-as-code or other automated security platform management methodologies
• Demonstrated experience working in regulated or high-sensitivity enterprise environments such as aerospace and defense, healthcare, or finance
• Advanced understanding of domain structures, user authentication, and digital signa