Product Security Engineering 2

Indotronix is seeking an :

Onsite Job - Product Security Engineering 2

Work Location: Colorado Springs, CO
Duration: 12 Months Contract
Education: Associate Degree or Above
Shift: First Shift
Start Time: 8:00 AM
End Time: 4:30 PM
Security Clearance: Active Secret DoD Clearance is Required

Position Responsibilities

• The candidate will partner directly with the Cyber Engineering organization to embed and validate cybersecurity solutions on the C2BMC platform at COS HWY-83, ensuring that all security controls are correctly implemented and fully tested.
• Serve as the primary liaison with the Cyber Test Facility (CTF) at MIDOC, where they will coordinate test events, validate test plans submitted by cyber teams, and brief program leadership on their analysis of the test plan while assisting the teams in identifying the specific cyber requirements needed for successful execution.
• Support cyber teams by facilitating the timely delivery of capabilities and solutions while maintaining a strong focus on vulnerability management.
• Handle Information Assurance Vulnerability Management (IAVM) tickets, Cyber Tasking Orders (CTO), Common Vulnerabilities and Exposures (CVE) remediation, vendor-issued patch integration, and the application and verification of DISA STIG configurations.

Required Qualifications

• Generally has 3+ years of related experience and may have a post-secondary degree or training in a related discipline.
• Must have an active full Secret DoD security clearance at start.
• Must have a DoD 8140 IAT-Level II certification (e.g., Security+ or higher) at start.
• Strong working knowledge of cyber capabilities, including:
  
  • Patch management
  • Multi-factor authentication
  • Host-based security
  • Intrusion detection
  • Security event management
  • Active/passive system scanning
  • Defense-in-depth
• Strong working knowledge of core cyber capabilities, including patch management, Group Policy Object (GPO) management, and proven remediation techniques for addressing cybersecurity vulnerabilities and threats.
• Security-engineering expertise in Information Assurance (IA) technologies, NIST standards, DoDI 8500.2, and Risk Management Framework (RMF) security controls.
• Hands-on experience throughout the Agile development lifecycle, specifically using the Scrum framework, including:
  
  • Identifying requirements
  • Defining user stories
  • Participating in sprint planning
  • Participating in daily stand-ups
  • Participating in sprint reviews
• Review test plans and test cases supplied by development teams, verify that they are correctly implemented, execute the tests, and provide clear, actionable feedback to ensure compliance with cybersecurity requirements.
• Experience configuring cyber audit tools, performing cyber vulnerability assessments, and handling configuration activities.
• Solid understanding of Software Development Life Cycle (SDLC) models and testing processes.
• Proficiency in cyber-tool software applications.
• Leadership experience, strong interpersonal skills, and the ability to support complex organizational relationships.
• Excellent technical writing and verbal communication skills to present technical cyber issues and reports to government stakeholders, program management, and other C2BMC functional areas.

Preferred Qualifications

• Wide application of principles, theories, and concepts in their field and provides solutions to a wide range of difficult problems with imaginative and thorough solutions.
• Works under general direction, and results are reviewed upon completion for adequacy in meeting objectives.
• Failure to achieve results normally results in serious program delays and considerable expenditure of resources.
• Frequent internal and external customer contacts and represents the organization in providing solutions to difficult technical issues associated with specific projects.

Education / Experience

• Education/experience typically acquired through advanced education (e.g. Associate) and typically 1 or more years' related work experience or an equivalent combination of education and experience (e.g. Bachelor, 3 years' related work experience, etc.).