Cybersecurity Engineer III

JOB SUMMARY:  

The Cybersecurity Engineer III serves as the senior technical authority for enterprise, mission, and federal cybersecurity programs. This role provides deep expertise across security architecture, cyber defense operations, risk management, compliance frameworks, secure system design, and threat mitigation. The Cybersecurity Engineer III ensures systems, networks, and applications meet stringent security requirements while guiding engineering teams, leadership, and customer stakeholders. 

The Cybersecurity Engineer III works closely with infrastructure, cloud, and application teams to ensure that security controls are integrated across enterprise environments and aligned with industry standards and regulatory requirements. 

This project delivers a mission-assured technical refresh of the CCIC2S Oracle database and RHEL operating environments, upgrading legacy systems to Oracle 19c and RHEL 9.7 while preserving full operational continuity.  It includes comprehensive engineering, integration, cybersecurity, testing, and deployment activities to ensure zero data loss, improved performance, strengthened security, and seamless compatibility across all CCIC2S mission systems.  Location will be north Colorado Springs initially and future work at Chidlaw and Peterson AFB occasionally.    

SUMMARY OF ESSENTIAL JOB FUNCTIONS  

• Implement and maintain enterprise security technologies, including firewalls, endpoint protection platforms, identity management solutions, and security monitoring tools. 
• Support the deployment and maintenance of security controls across on-premises, cloud, and hybrid environments.
• Conduct security assessments, vulnerability analyses, and risk evaluations of systems and applications.
• Monitor security events and alerts using Security Information and Event Management (SIEM) platforms.
• Investigate security incidents and support containment, remediation, and recovery activities.
• Assist with threat hunting activities and analysis of indicators of compromise (IOCs).
• Perform vulnerability scanning and track remediation efforts with system owners.
• Support secure configuration management and patch management activities.
• Evaluate technical solutions for security risks and recommend appropriate mitigations.
• Assist engineering teams with integrating security controls into system architectures and platform deployments.
• Contribute to the development and maintenance of security documentation, procedures, and technical standards.
• Support compliance efforts related to regulatory, contractual, and organizational security requirements.
• Participate in security audits, assessments, and authorization activities.
• Assist with implementation and maintenance of cybersecurity frameworks, including: 
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-53
• Risk Management Framework (RMF)
• ISO/IEC 27001
• Provide technical input during cybersecurity reviews, design discussions, and engineering planning activities. 

REQUIRED SKILLS AND EXPERIENCE:  

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline, or equivalent experience. 
• 4-7 years of experience in cybersecurity, information security, systems administration, network engineering, or related technical roles.
• Experience administering or supporting security technologies such as SIEM, endpoint protection, firewalls, identity management, or vulnerability management platforms.
• Working knowledge of network security principles, security architecture concepts, and identity and access management.
• Experience supporting compliance initiatives involving frameworks such as RMF, NIST 800-53, NIST CSF, or similar standards.
• Familiarity with security tools including SIEM, EDR, IDS/IPS, PKI, IAM, and vulnerability scanning solutions.
• Experience supporting cloud security initiatives within Microsoft Azure, AWS, or other cloud environments.
• Understanding of security concepts related to virtualization, operating systems, networking, and enterprise infrastructure.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience supporting regulated environments, federal government customers, or enterprise organizations is preferred.
• Familiarity with DevSecOps concepts, security automation, and infrastructure security practices.
• Basic scripting or automation experience using PowerShell, Python, Bash, or similar technologies.
• Ability to maintain a Secret clearance.

Relevant certifications are preferred, including:  

• Security+
• CySA+
• GSEC
• Azure Security Engineer Associate
• AWS Security Specialty
• Ability to obtain and maintain a Secret security clearance; existing clearance preferred. 

PHYSICAL DEMANDS: 

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions. While performing the duties of this job, the employee is regularly required to:  

• Remain in a stationary position for extended periods of time. 
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus. 

WORK ENVIRONMENT: 

This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.