Information System Security Engineer

Tyto Athene is searching for a Senior Information System Security Engineer to support a growing program in Colorado Springs. In this position you will be assigned to support the US Space Force’s Space Systems Command, Operational Command and Control Acquisition Delta, known as Kobayashi Maru. Kobayashi Maru is responsible for continuously delivering impactful software for space operations. The program office’s mission includes the development and deployment of software for space defense, space domain awareness, and enabling data services.

Responsibilities:

• Responsible for implementing processes, procedures, data flows, and artifacts for assessment and authorization activities necessary to meet Department of Defense operational acceptance requirements.
• The Cybersecurity team is organized in two core functions, software assessment and Risk Management Framework/environment assessment. Embracing the tenants of DevSecOps, this Cybersecurity team is customer-oriented and fully integrated throughout the software development and deployment lifecycle.
• This team’s top priority is to enable rapid, secure delivery of software applications to the warfighter.
• You will be responsible for performing analyses and authoring documentation to enable Authority to Operate approval and maintain cyber security accreditation and certification.
• You will perform periodic assessments of the enterprise and its components to ensure compliance with overarching information security and cybersecurity requirements.
• You will secure the build, configuration, deployment, operation, and monitoring of commercial Virtual Private Clouds, as well as secure Kubernetes platforms.
• You will ensure the secure management of the complete stack through monitoring, incident response, disaster recovery, security compliance/auditing, networking, storage, and service brokers.
• With automation and an ‘everything as code’ mentality, you will help execute the Kobayashi Maru cybersecurity framework for 14 software product teams and thousands of users across the test, IL4 development, IL6 staging/production, and higher classification level stagging/production environments.

Required:

• Minimum 10 – 15 years of relevant experience in assigned position/function
• Relevant STEM, Computer Science, Cyber, IT, or Management bachelor’s degree associated with assigned position/function from an accredited university
• Security is required as a privileged access user
• One of the following or industry recognized equivalent certifications relevant to assigned position/function: Cloud Solutions Architect, CSSP, DevOps Expert, CKAD, Cloud Security, Cloud Admin, CCNA, Network , or SRE Foundation certification as applicable
• Possession of a valid certification per DoD Directive 8570.01-M for Information Assurance Technician Level II
• You are a US Citizen
• Your resume must demonstrate experience:
• Implementing Department of Defense cybersecurity policies, directives, instructions, and standards for software-intensive mission systems
• Developing Risk Management Framework assessment and authorization documentation
• Writing and executing cybersecurity test procedures for validation of Risk Management Framework control compliance
• Monitoring and analyzing outputs of cybersecurity-related tools for vulnerabilities, reportable security incidents, and residual risks
• Reviewing and/or authoring documentation such as, Cybersecurity Strategies, Program Protection Plans, Anti-Tamper Plans, Counterintelligence Support Plans, Integrated Threat Assessment Reports, Operations Security Plans, Continuous Monitoring Plans, and Defensive Cyberspace Operations Plans
• Working in eMASS and/or Xacta

Clearance:

• Must be eligible for a Top-Secret SCI clearance

Location:

• This is not a remote or hybrid role – you will work 100% on-site daily in a SCIF at 2424 Garden of the Gods, Colorado Springs, CO.