The Aerospace Corporation is the trusted partner to the nation’s space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space— delivering innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you’ll be part of a special collection of problem solvers, thought leaders, and innovators. Join us and take your place in space.
The Office of the Chief Information Security Officer (OCISO) is responsible for Aerospace’s classified enterprise IT environment Cybersecurity. As an Information Systems Security Engineer(ISSE) (Information Systems Security Engineer Staff IV) , you will be responsible for engineering and maintaining cyber tools and infrastructure, ensure vulnerability and security hardening compliance, and support assessment and authorization activities enabling critical missions. You will join a company that develops cutting edge solutions for our nation’s most complex space enterprise and mission assurance challenges and a team dedicated to Cybersecurity Excellence and innovative problem solving
Work Model
The selected candidate will be required to work full-time, on-site at our facility in Colorado Springs, CO.
What You’ll Be Doing
Conduct and support security assessments, vulnerability scans, and risk analyses to identify and mitigate potential weaknesses
Coordinate with system administrators, developers, and network engineers to implement technical security controls and ensure ongoing compliance
Work with independence to accomplish and successfully fulfill CISO and CSO Business Objectives
Install, configure, and maintain cyber tools such as Tenable Nessus, Trellix, & SPLUNK
Support ISSOs and ISSMs with security assessment and authorization (A&A) processes to achieve and maintain Authority to Operate (ATO)
Participate in design reviews, configuration management boards, and change control processes to ensure security implications are properly addressed.
Provide security engineering input to system design, architecture decisions, and testing activities
Collaborate with OCISO Personnel, Classified Network ISSOs & ISSMs, and government security officials to meet program security objectives and milestones
Develop and maintain positive relationships with program offices to showcase and sustain the department's activities.
Build and maintain strategic relationships with government customers, DoD and IC program offices, industry partners, and research institutions.
What You Need to be Successful
Minimum Requirement:
Active TS/SCI clearance with SSBI
DoD approved 8570/8140 baseline certification such as Security+ or equivalent
Minimum 10 or more years of relevant experience with Bachelor’s Degree in Cybersecurity, IT, or Computer Science or, 8 or more years of relevant experience with Master’s Degree in Cybersecurity, IT or Computer Science.
Working knowledge of eMASS ATO Processes, RMF, NIST 800-53, and DISA STIGs
Hands-on experience with system hardening, vulnerability management, and security control implementation on Linux and/or Windows platforms
Proficiency with common security tools such as ACAS/Nessus, STIG Viewer, SCAP, SPLUNK, And Trellix
Demonstrated experience managing Plans of Actions and Milestones (POA&Ms) through identification, remediation, and closure of security findings to support RMF and ATO compliance
Strong communication and documentation skills for preparing technical reports and security artifacts
Ability to collaborate across multidisciplinary technical teams and engage with government stakeholders
How You Can Stand Out
It would be impressive if you have these:
Advanced degree/certifications in Information Technology, Cybersecurity, Information Assurance, or related Cyber-Oriented Degrees
Experience in CAP/SAP environments
Proficiency in scripting and automating…