Senior Staff / Senior Cybersecurity Engineer (Clearance Required)

SciTec, a Firefly Aerospace company is a dynamic leader in delivering advanced sensor data processing technologies and scientific instrumentation capabilities in support of National Security and Defense, and we are growing our creative team! We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique world-class data exploitation capabilities.

Important Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. Applicants that do not meet this requirement will not be considered.

SciTec has immediate opportunities for an experienced Senior Cybersecurity Engineer to work in our Boulder, CO office.

Responsibilities:

• Participate in security development, configuration, and auditing at different environments
• Harden and secure program infrastructure assets, including servers, network devices, storage systems, and supporting platforms
• Develop and maintain secure change management processes and documentation
• Coordinate work for individual tasks across multiple functional technical teams
• Participate in security controls related to CI/CD work
• Participate in STIG and ATO audit processes
• Create and maintain SIEM queries in response to emerging threats around environment.
• Ensure logging, monitoring, and access controls meet security and compliance requirements
• Identify and mitigate operational cybersecurity risks
• Support incident response preparation, mission resiliency, and operational continuity planning efforts
• Collaborate security implementations and documentation across program teams
• Other duties as assigned

Requirements

• Combined total of 7+ years in system administration, network engineering, and cybersecurity
• 3+ years as a system administrator or with direct experience security RedHat environments
• DoD 8570 IAT Level II Certification
• Secret clearance and ability to obtain TS/SCI
• Experience securing development and operations environments
• Experience with ACAS vulnerability scans, OpenSCAP, Anchore
• Experience with configuring alerting for SIEM tools
• Experience with Security Technical Implementation Guides ( STIGs ) and applying them
• Experience decomposing high-level operational requirements into functional definitions, verification objectives, and full system specifications, and identifying enabling and critical technologies, constraints, and risks
• Knowledge of ATOs and other government compliance frameworks
• Applicants MUST be willing to work on-site from various sites as-needed in the Boulder and Denver area
• Detail oriented
• Strong oral and written communication skills

• Experience with PKI administration and certificate lifecycle management
• Experience analyzing network configurations and network architecture diagrams
• Specific experience with ACAS scanning, Anchore, OpenSCAP, ClamAV, Bitdefender EDR, or ELK security
• Experience with applying hardening configurations and implementing compliance tools
• Knowledge of network security and incident response procedures
• Experience with technical documentation or tech writing skills
• Secure development lifecycle and secure data lifecycle processes
• Bachelor's degree in related field

Benefits

SciTec offers a highly competitive salary and benefits package, including:

• 4% Safe Harbor 401(k) match
• 100% company paid HSA Medical insurance, with a choice of 2 buy-up options
• 80% company paid Dental insurance
• 100% company paid Vision insurance
• 100% company paid Life insurance
• 100% company paid Long-term Disability insurance
• Short-term Disability insurance
• Annual Profit-Sharing Plan
• Discretionary Performance Bonus
• Paid Parental Leave
• Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
• Flexible work hours

The pay range for this position is $125,000 - $193,000/ year. SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.