Cyber Security Engineer - Senior

Modern Technology Solutions Inc. (MTSI) is seeking a Senior Cyber Security Engineer to join our team in the Colorado Springs area to support Department of the Air Force (DAF) and U.S. Space Force (USSF) programs. The role involves mentoring, assisting, assessing, and ensuring program compliance with applicable security regulations for various classified information systems. The position requires an active Top Secret clearance with SCI eligibility. The successful candidate will be a self-starter with initiative, strong communication skills, the ability to lead diverse teams, collaborate with cross-functional groups, and proven problem-solving abilities.

Responsibilities

• Maintain thorough working knowledge of Risk Management Framework (RMF) doctrine and related DoD guides, directives, and manuals, including DoD Instructions 8500.01 and 8510.01, and supporting doctrine (e.g., NIST SPs 800-18, 800-30, 800-37, 800-47, 800-53, 800-53A, 800-60, 800-115, 800-128, 800-137, 800-160, 800-161) and CNSSP-11, CNSSI-4009, CNSSI-1253 issuances.
• Apply mastery knowledge of the Joint Special Access Program (SAP) Implementation Guide (JSIG) within the SAP community.
• Provide expert support, research, and analysis for exceptionally complex cybersecurity problems and processes.
• Serve as a technical expert to the Cybersecurity Assessment Program, offering direction, interpretation, and alternatives for complex issues.
• Think independently and demonstrate exceptional written and oral communication skills; apply advanced technical principles, theories, and concepts; contribute to developing new principles, concepts, and methodologies.
• Work on unusually complex technical problems and deliver highly innovative and ingenious solutions.
• Assist in developing software tool requirements and selection criteria, including creating product-specific STIGs from applicable DISA Security

Requirements

• Guides (SRGs).
• Lead teams of technical and project managers in implementing long-range goals and objectives; support customer and SAP community IA working groups and participate in SSE IPT reviews.
• Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on implementing an effective cyber security posture within their programs, organizations, and agencies.
• Evaluate information system threats and vulnerabilities to determine if additional safeguards are required; advise the government on impact levels for Confidentiality, Integrity, and Availability.
• Review security assessment documentation and provide written recommendations to ISO, IDO, PSO, and DAO/AO; evaluate and assess authorization boundaries and propose changes to enhance security posture.
• Provide mastery guidance on protection level implementations and how to achieve the appropriate authorization.
• Ensure all phases of the system development life cycle (SDLC) are addressed, and ensure government organizations implement and execute cyber security in accordance with the DoD Acquisition strategy.
• Evaluate the effectiveness and implementation of Continuous Monitoring Plans; assist with development and maintenance of the Program Protection Plan.
• Represent customers in ISSE-related working groups, advisory groups, and advisory council meetings.

Requirements

• Minimum of 8 years of experience as a Cyber Security Engineer or in a related role.
• At least 5 years of experience as an Information Systems Security Manager (ISSM), Information Systems Security Officer (ISSO), Information Systems Security Engineer (ISSE), or similar positions.
• Experience assessing SAP and SCI information systems (desired).
• Experience authoring A&A documentation and system authorization artifacts for SAP and SCI systems.
• Knowledge of federal security requirements and mandates, including RMF, FIPS, NIST standards, and JSIG.
• Excellent oral and written communication skills; ability to work well independently or as part of a team.
• At least 5 years of experience as a Security Control Assessor Representative (SCAR) or Security Control Assessor (SCA) (desired).
• Education: Bachelor of Science degree in computer science, cybersecurity, software engineering, data science, software development, or another STEM-related field.
• DoD 8140.3 Advanced Certified.