Product Security Engineering 2

Indotronix is seeking an :

OnsiteJob -Product Security Engineering 2

Work Location: Colorado Springs, CO
Education: Associate Degree or Above
Shift: First
Work Schedule: 8:00 AM - 4:30 PM
Security Clearance: Active Secret Clearance Required

Position Responsibilities:

• Partner directly with the Cyber Engineering organization to embed and validate cybersecurity solutions on the C2BMC platform at COS HWY-83, ensuring that all security controls are correctly implemented and fully tested.
• Serve as the primary liaison with the Cyber Test Facility (CTF) at MIDOC, coordinating test events and validating test plans submitted by cyber teams.
• Brief program leadership on analysis of test plans while assisting teams in identifying the specific cyber requirements needed for successful execution.
• Support cyber teams by facilitating the timely delivery of capabilities and solutions while maintaining a strong focus on vulnerability management.
• Handle Information Assurance Vulnerability Management (IAVM) tickets, Cyber Tasking Orders (CTO), Common Vulnerabilities and Exposures (CVE) remediation, vendor-issued patch integration, and the application and verification of DISA STIG configurations.

Required Qualifications:

• Generally has 3+ years of related experience and may have a post-secondary degree or training in a related discipline.
• Must have an active full Secret DoD security clearance at start.
• Must have a DoD 8140 IAT-Level II certification (e.g., Security+ or higher) at start.
• Strong working knowledge of cyber capabilities, including:
  
  • Patch management.
  • Multi-factor authentication.
  • Host-based security.
  • Intrusion detection.
  • Security event management.
  • Active/passive system scanning.
  • Defense-in-depth.
• Strong working knowledge of core cyber capabilities, including patch management, Group Policy Object (GPO) management, and proven remediation techniques for addressing cybersecurity vulnerabilities and threats.
• Security-engineering expertise in Information Assurance (IA) technologies, NIST standards, DoDI 8500.2, and Risk Management Framework (RMF) security controls.
• Hands-on experience throughout the Agile development lifecycle, specifically using the Scrum framework, including:
  
  • Identifying requirements.
  • Defining user stories.
  • Participating in sprint planning.
  • Participating in daily stand-ups.
  • Participating in sprint reviews.
• Review test plans and test cases supplied by development teams, verify correct implementation, execute tests, and provide clear, actionable feedback to ensure compliance with cybersecurity requirements.
• Experience configuring cyber audit tools, performing cyber vulnerability assessments, and handling configuration activities.
• Solid understanding of Software Development Life Cycle (SDLC) models and testing processes.
• Proficiency in cyber-tool software applications.
• Leadership experience, strong interpersonal skills, and the ability to support complex organizational relationships.
• Excellent technical writing and verbal communication skills to present technical cyber issues and reports to government stakeholders, program management, and other C2BMC functional areas.

Preferred Qualifications:

• Wide application of principles, theories, and concepts in the field with the ability to provide solutions to a wide range of difficult problems using imaginative and thorough solutions.
• Ability to work under general direction, with results reviewed upon completion for adequacy in meeting objectives.
• Ability to handle responsibilities where failure to achieve results may result in serious program delays and considerable expenditure of resources.
• Ability to maintain frequent internal and external customer contacts and represent the organization in providing solutions to difficult technical issues associated with specific projects.

Education / Experience:

• Education/experience typically acquired through advanced education (e.g. Associate) and typically 1 or more years' related work experience or an equivalent combination of education and experience (e.g. Bachelor, 3 years' related work experience, etc.).