Senior-Level Cyber Security Engineer

Sigma Defense is a leading technology company serving the Department of Defense (DoD), providing tactical communications systems and services for digital modernization since 2006. Through our acquisitions of SOLUTE in January 2022 and Sub U Systems in May 2022, we have expanded our software and communications hardware solutions to better support JADC2, C5ISR, SATCOM, and DEVSECOPS for customers in the Army, Navy, Air Force, Marine Corps, and Space Force. Through a combination of hardware, software, and industry expertise, we provide a complete portfolio of solutions and services that accelerates information collection and sharing for faster decision making and better mission outcomes.

Why would you work for us? Quite simply, the work we do is meaningful and stimulating. We promote initiative and independent thought; we encourage direct client engagement to ensure we are delivering what the customer wants; and our engineers and scientists are working on cutting-edge projects that move the state-of-the-art closer to the people who need them. If you're looking for technical challenges and an opportunity to take a leadership role in an environment that encourages you to excel, then WE are your destination.

We are a company of innovative professionals thriving in a highly motivating work environment that fosters creativity and independent thinking. If you are a motivated individual with a desire to support our service men and women, now is a great time to join Sigma Defense!

To learn more about our company, find and follow us at Sigma Defense Systems LLC: Overview | LinkedIn.

Requirements

• Possesses and applies a comprehensive knowledge across key tasks and high impact assignments.
• Plans and leads major technology assignments.
• Evaluates performance results and recommends major changes affecting short-term project growth and success.
• Functions as a technical expert across the team and tasks.
• May be the lead for others.
• Ability to demonstrate an advanced understanding in agile and DevSecOps methodologies.
• Experience with running red team/blue team security games and analysis.
• Understanding of live monitoring of cyber environment for potential attacks, vulnerabilities, and log analysis.
• Domain and expert technical knowledge.
• Decision-making and domain knowledge may have critical impact on overall project implementation.
• Knowledge of modern security methods and vulnerabilities.
• Ability to stay up to date on emerging security threats.
• Experienced in software and security testing, especially with containerized applications.
• Understanding of physical security threats and countermeasures.
• Strong "security first" mindset.
• Knowledge and hands-on experience in developing and implementing security into infrastructure, platforms, and software.
• Ability to work independently and with a cross functional team.
• Knowledge and hands-on experience with agile and DevSecOps methodologies.
• Certified Information Systems Security Professional (CISSP) - (PREFERRED, IF POSSIBLE, for Senior Engineer)
• Demonstrated cybersecurity experience with Linux operating systems.
• Experience hardening Kubernetes and containers a plus.
• Experience with Cloud (e.g. AWS, Azure, etc), Security Products, network vulnerability scanning platforms.
• Certified Cloud Security Professional (CSSP)
• 2+ years’ experience with container technologies such as Docker or Kubernetes.
• XACTA and EMASS experience.
• Specific knowledge of NIST RMF 800-53 control.
• Must have the ability to obtain a DoD Secret security clearance.

Essential Job Duties (not all-inclusive)

• Provide technical/management leadership on major tasks or technology assignments.
• Establish goals and plans that meet project objective.
• Development of cybersecurity architecture with ability to adapt quickly to evolving requirements.
• Creating and maintaining documentation for implementation.
• Responsible for safeguarding information systems assets by identifying and solving potential and actual security problems.
• Continuous monitoring of live cyber environments for potential attacks, vulnerabilities, and log analysis.
• Development of cybersecurity architecture with ability to adapt quickly to evolving requirements.
• Responsible to maintain and improve a platform Authority to Operate (ATO) in cloud environments and have hands-on experience in Risk Management Framework (RMF) security assessments.
• Document assessments and pro