IA Analyst Cybersecurity Engineer {A}

Position Overview:

We are looking for an experienced, motivated, and hands-on Cybersecurity Engineer. Reporting to the Senior Manager of Information Assurance and working in unison with the IA, IT, and Security teams across ARKA, you will be responsible for the advancement of our current IT security program. This includes the execution and improvement of our organizations’ incident response and threat detection capabilities, as well as supporting internal IT security audit functions to ensure compliance with applicable NIST standards, government, company, and customer regulations. This position is an integral member of the ARKA enterprise. 

This position can be performed remotely or on-site at any of our facilities located in Colorado Springs, CO, Danbury, CT, or Ypsilanti, MI.

 

Responsibilities: 

• Design, implementation, and maintenance of cybersecurity solutions, to include, firewalls, IDS/IPS, EDR, SIEM, and data encryption technologies
• Conduct security impact analysis for proposed changes to organizational IT baselines
• Provide subject matter expertise on topics relevant to current and future corporate network operations, including, cloud security, zero-trust, industry standards on security best practices (NIST, MITRE, DevOps, data classification).
• Assist in internal IT compliance audits to assess the practical implementation of regulatory security requirements.
• Support the organizations insider threat prevention and threat hunting program by performing visibility gap analytics
• Support continuous monitoring and incident response efforts (sometimes after-hours), including investigations, preparation activities, playbook development, and ad-hoc tabletop exercises
• Maintain a well-managed repository of audit documentation which supports internal processes and demonstrates compliance with regulatory requirements.
• Provide regular reporting to internal and external government customer and program management in the form of meetings, standardized deliverables, reports, presentations
• Independently identify and recommend technical solutions for discovered risks on the corporate network

 

Education Requirements: 

• BS Degree in relevant field such as Information Management, Systems Security or Cyber Security.
• Relevant industry certifications that demonstrate proficiency in security, cloud technologies, IT auditing, or other DoD Approved 8570 Baseline Certifications

 

Experience Required: 

• 3 + years relevant professional experience in cybersecurity.
• Attention to detail and follow-through when completing tasks.
• Capability to develop and implement solutions to a variety of complex problems.
• Excellent written, verbal, and presentation skills.
• Willing to work extended hours, in a fast paced, deadline driven environment.
• Ability to display tact, discretion, and diplomacy in dealing with all levels of employees.
• A strong knowledge of risk based advanced IT auditing in a dynamic and changing environment in compliance with known security frameworks such as RMF, CMMC, and/or CSF.
• Experience with technologies such as: Amazon Web Services, Azure Cloud Services, Azure Active Directory, Microsoft Sentinel, Defender, and Purview, CrowdStrike, Virtualization/Orchestrated Containerization, Linux based systems, Cisco ISE, Palo Alto Networks, RedHat Linux, Windows, Oracle Database, Microsoft 365, network devices, etc.
• Experience working with vulnerability assessment tools such as Nessus to assist in IT system hardening according to STIGs, CIS Benchmarks, and/or vendor recommendations as well as risk mitigation.
• Experience working with GRC tools such as Xacta, EMass, and/or SNOW.

 

Desired Experience:

• Knowledge of one or more general-use programming languages (Bash, Python, Powershell) and demonstrated proficiency building out scalable applications.
• Experience deploying enterprise wide SIEM solutions.
• Experience proposing technical material to managerial leadership in a fashion that’s concise, digestible, and well-explained.
• Demonstration of continuous education which represents the modern technology and threat landscape through research, homelabbing, certifications, and work-supporting projects.

 

Travel Requirements: 10-20%

 

Locations:

This position can be remote or based out of any of the following locations:

Based out of ARKA’s Colorado Springs, CO campus. If you like city life, but also enjoy the great outdoors, Colorado Springs is the place for you. The city rests at the base of Pik