Junior Information Security Engineer

Maxar is seeking junior to entry level Information Security engineer in a hybrid remote/in-person role on the Information Assurance team closely supporting a software development, maintenance and operation project under Department of Defense contract.  We are seeking a problem-solver who brings professionally or personally developed technology competencies and is willing to learn and quickly apply new knowledge and processes.  The ideal candidate is attentive to detail and equally comfortable following documented procedures or devising new procedures and documenting them to communicate to their team in a culture of inclusive teamwork and continuous improvement.  The work will focus on achieving results within strictly bounded deadlines, applying compliance and testing standards with unwavering integrity, and always keeping sight on our customer’s mission capability.  Maxar encourages strong contributors who demonstrate growth potential with career advancement opportunities to advance in the Information Security, Information Assurance or System Administration professions.

Note: US citizenship is mandatory for this position with the ability to obtain a TS/SCI Clearance.

Location:  Westminster, Colorado

Principal Responsibilities:

• Improve system security posture by running vulnerability scans, patching software, applying configuration-based controls following DISA STIG benchmarks or vendor best-practices, and recommending future fixes and process improvements
• Maintain mission-critical functionality by rigorously testing all changes in a sandbox environment using both pre-defined software tests and ad-hoc operability tests based on one’s own judgement
• Assist with maintaining security documentation by evaluating STIG checklists, analyzing reports from automated scans, documenting remediation work and communicating results to the IAM
• Troubleshoot and resolve network, virtualization, and software configuration issues
• Communicate with multidisciplinary team and articulate technical concepts and ideas effectively

Skills Required

• 0-5 years of technical experience implementing security controls on information systems based on compliance benchmarks or procedural requirements
• Bachelor’s degree or higher in a Computer Science, Information Technology, Cybersecurity, Data Science or Information Systems from an accredited institution OR relevant DoD/Military training OR active CompTIA Security+, CASP+, GSEC or comparable or higher certification OR 2 years of previous professional experience in a cybersecurity, information security, or information assurance role
• Strong proficiency with the Linux operating system command-line interface (CLI)
• Proficiency with container platform or orchestration software (e.g., Docker, Kubernetes, OpenShift)
• Communicates effectively with peers and supervisors both verbally and in writing
• Willingness to work on-site at least 3 days a week
• US citizenship and ability to obtain a security clearance

Additional Skills Desired

Familiarity in these areas is not required but is preferred.

• Can work independently in a fast-paced dynamic environment and manage multiple priorities
• Familiarity with common industry software tools and common IT and software development concepts and best practices
• Familiarity with satellite ground station downlink processes and information systems
• Familiarity working on or closely supporting software development projects using a shared repository and build environment, especially GitLab
• Experience with Red Hat, CentOS or Fedora Linux system administration
• Experience with Kubernetes, Minikube or MicroK8s
• Experience with Docker
• Experience with Rancher
• Experience with PostgreSQL database administration
• Experience with firewalld or iptables configuration
• Experience implementing TLS and certificate-based endpoint authentication
• Experience with automated vulnerability scanning software (e.g. Nessus, Greenbone, OpenVAS)
• Experience with Secure Technical Implementation Guides (STIGs)
• Familiarity VMware vCenter, vSphere or ESXi
• Additional technology-specific certifications for any of the above software
• Python, BASH and/or SQL scripting skills
• Familiarity with NIST 800-171 or NIST 800-53 RMF/compliance frameworks

In support of pay transparency at Maxar, we disclose salary ranges on all U.S. job postings.  The successful candidate’s starting pay will fall within the salary range provided below and is determined based on job-related factors, including, but n