Senior Staff / Senior Cybersecurity Engineer (Clearance Required)

SciTec, a Firefly Aerospace company is a dynamic leader in delivering advanced sensor data processing technologies and scientific instrumentation capabilities in support of National Security and Defense, and we are growing our creative team! We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique world-class data exploitation capabilities.

• →Participate in security development, configuration, and auditing at different environments
• →Harden and secure program infrastructure assets, including servers, network devices, storage systems, and supporting platforms
• →Develop and maintain secure change management processes and documentation
• →Coordinate work for individual tasks across multiple functional technical teams
• →Participate in security controls related to CI/CD work
• →Participate in STIG and ATO audit processes
• →Create and maintain SIEM queries in response to emerging threats around environment.
• →Ensure logging, monitoring, and access controls meet security and compliance requirements
• →Identify and mitigate operational cybersecurity risks
• →Support incident response preparation, mission resiliency, and operational continuity planning efforts
• →Collaborate security implementations and documentation across program teams
• →Other duties as assigned

• Combined total of 7+ years in system administration, network engineering, and cybersecurity 
• 3+ years as a system administrator or with direct experience security RedHat environments
• DoD 8570 IAT Level II Certification
• Secret clearance and ability to obtain TS/SCI
• Experience securing development and operations environments
• Experience with ACAS vulnerability scans, OpenSCAP, Anchore
• Experience with configuring alerting for SIEM tools
• Experience with Security Technical Implementation Guides ( STIGs ) and applying them
• Experience decomposing high-level operational requirements into functional definitions, verification objectives, and full system specifications, and identifying enabling and critical technologies, constraints, and risks
• Knowledge of ATOs and other government compliance frameworks
• Applicants MUST be willing to work on-site from various sites as-needed in the Boulder and Denver area
• Detail oriented
• Strong oral and written communication skills

Candidates who have any of the following skills will be preferred:

• Experience with PKI administration and certificate lifecycle management
• Experience analyzing network configurations and network architecture diagrams
• Specific experience with ACAS scanning, Anchore, OpenSCAP, ClamAV, Bitdefender EDR, or ELK security
• Experience with applying hardening configurations and implementing compliance tools
• Knowledge of network security and incident response procedures
• Experience with technical documentation or tech writing skills
• Secure development lifecycle and secure data lifecycle processes
• Bachelor's degree in related field