Cybersecurity Engineer

Sonalysts, Inc. is seeking an experienced Cybersecurity Engineer with critical thinking skills capable of developing and implementing security controls for classified network systems. Candidates should have familiarity with U.S. Department of Defense (DoD) information systems and knowledge of Information Assurance concepts to include the application of Risk Management Framework (RMF) policies and procedures. Knowledge of U.S. Air Force and/or Space Force related security procedures or systems is a plus.
Submission
Prompt responses are encouraged because the deadline could be accelerated or delayed if, in our judgement, either is warranted.

• Working onsite at our campus in Colorado Springs, CO
• Design, develop, and implement security controls to preserve confidentiality, integrity and availability of information systems
• Integrate security configuration procedures and tools on Windows and Linux platforms
• Evaluate requirements, select/implement security controls, translate technical concepts & control requirements into guidance, create and/or review installation procedures, conduct verification and validation of test procedures and script changes, tailor and configure security controls for specific product use, tailor platform hardening, implement application software and/or Operating System vulnerability patches, draft security assessment plans, prepare test procedures, perform security tests, and perform security vulnerability assessments using Tenable Assured Compliance Assessment Solution (ACAS)
• Identify issues and recommend solutions for remediation to the software development team
• Identify issues, recommend, and develop solutions for enhancing current processes and procedures
• Participate in assessment and authorization (A&A) activities with various government authorities and authorization agents to obtain and maintain official system Authorization to Operate (ATO)
• Provide security control guidance to the customer in compliance with the NIST SP 800-53 Revision 5 Risk Management Framework (RMF) and the respective Cognizant Security Office
• Completing security DoD and Information Assurance (IA) training as required
• Input data into the Enterprise Mission Assurance Support Service (eMASS) system
• Perform vulnerability scans, analyze results, construct remediation plans with system engineers, and implement remediation solutions in compliance with SLAs
• Support day-to-day information system operations installing, configuring, & upgrading software, conduct preventative maintenance inspections, and resolving network/computer/peripheral issues on workstations, servers, and network infrastructure
• Verify accuracy and completion of security procedures, documents, and forms
• Assist with classified spills/incident response or other security-related incidents

• Salary ranges between $80,000-$115,000, dependent on experience, qualifications and other relevant business criteria. There are no bonuses, commissions or other compensation unique to this job.
• Opportunity to challenge yourself (learn and grow) intellectually as technologies advance.
• Working on challenging and innovative projects.
• General benefits for full-time employees are described below.
• Flexible Work Schedule
• Paid Time Off, including Sick or Personal Time Off account and Vacation and Holiday account
• Educational Reimbursement Program
• Sonalysts Employee Stock Ownership Plan (ESOP)
• Sonalysts Retirement and Savings (401(K)) Plan
• Our health benefits include
• Comprehensive medical coverage offered through a High-Deductible Health Plan with a national network of providers. A Health Reimbursement Account (HRA) is offered, which is used in conjunction with the High-Deductible Health Plan.
• Life accidental death and dismemberment insurance
• Dental coverage
• Short-term disability insurance
• Long-term disability insurance
• Medical and dependent care flexible spending accounts

Note The foregoing description of benefits at Sonalysts is a highly simplified summary of a series of lengthy, complex, legal plan documents. Moreover, the plan documents are changed from time to time, both to address changes in the law and to address…