Lead Cyber Security Systems Engineer

Parsons is looking for a talented Lead Cyber Security Systems Engineer to join our growing team!

If you are a technically accomplished cyber security professional who enjoys leading a high-performance security engineering efforts in a collaborative, mission-focused environment, we have an exciting opportunity for you in beautiful Boulder, Colorado. The OPIR TAP Lab is the U.S. Space Force’s premier Remote Sensing application development laboratory, with extensive computing and network infrastructure across multiple levels of data classification. https://boulderlab.org/

What You’ll Be Doing:

• Lead the team in the execution and prioritization of cyber security systems and controls.
• Secure classified and unclassified Linux, Windows, network, virtualization, cloud, container, and storage environments.
• Maintain multiple ATOs across a variety of system types, and classifications.
• Direct vulnerability management, system hardening, security monitoring, incident response, and compliance activities.
• Ensure monitoring of security alerts and dashboards, investigations of anomalies, and coordinate remediation or escalation of issues.
• Develop and maintain security monitoring use cases, detection rules, response procedures, and automation.
• Reporting on vulnerability assessments and support remediation, validation, and reporting activities.
• Prioritize cybersecurity tasks based on program needs and direction at an agile pace
• Communicate with senior leadership and customers the risk posture of multiple enclaves and work required to maintain ATOs.
• Generate and analyze cyber security reports and assessment documentation.
• Coordinate with other product owners to resolve security issues.
• Write policies in compliance with DoD requirements, including CNSSI, EOs, DoDIs & DoDMs, NIST Special Publications.
• Provide technical leadership, mentorship, and guidance to cybersecurity personnel.
• Support security activities for classified and unclassified lab events, demonstrations, and mission operations.
• Act as a SME for all cybersecurity related questions from the program and customer.
• Be a trusted advisor to the ISSM, and program as a whole.

• Active Secret DoD Security Clearance with the ability to obtain and maintain a TS/SCI clearance.
• Bachelor’s degree, with additional years of experience able to count in lieu of a degree
• 15+ years of experience, with additional education, training, and certs able to count towards total years of experience
• Current Security+ certification or equivalent DoD8140 Qualification
• Experience leading cybersecurity engineering activities in enterprise, laboratory, classified, and mission-critical environments.
• Strong experience with Red Hat Enterprise Linux, Microsoft Windows, Active Directory, Nutanix and VMware, Rancher RKE2
• Experience with eMASS processes and usage for ATO, ATC, authorization requests.
• Experience with agile and SCRUM processes and management style.
• Experience with JIRA, Confluence, or similar collaboration tools.
• Experience with DoD standards and frameworks including: NIST SP800-53, 800-60, 800-210, 800-207, 800-171, 800-18, FIPS-199, FIPS 140-3, FIPS 200
• Knowledge of vulnerability assessment, incident response, risk analysis, threat identification, and security remediation.
• Experience with securing virtualized, bare-metal, containerized, and cloud environments.
• Ability to communicate effectively to stakeholders and government customer
• Strong troubleshooting, analytical, communication, leadership, and interpersonal skills.
• Ability to work collaboratively in an RDT&E environment, with an understanding of the risk posture and client needs.
• Ability to work effectively in production environments and handle sensitive or classified information.
• Experience implementing AI Governance and controls in a DoD environment.

What Desired Skills You Might Bring :

• Master’s degree in Cyber Security, Information Technology, Computer Science, Engineering, or a related field.
• CISSP, CISM, GSEC
• Experience with DoD Risk Management Framework processes and authorization packages.
• Experience as an ISSM, ISSO, and ISSE
• Experience with identity and access management, multi-factor authentication, privileged access management, and zero trust principles.
• Experience with AWS cloud security, including IAM, VPC, CloudTrail, EC2, S3, or comparable services.
• Experience with Docker, Podman, Kubernetes, OpenShift, Ansible, Terraform, or other automation and orchestration tools.
• Experience securing network devices, routers, switches, load balancers, and firewalls.
• Experience with ACAS/Nessus/Tenable, ElasticXDR platform, OpenSCAP/SCC/EvaluateSTIG, STIGs, and STIG Viewer.
• Experience briefing technical findings, security risks, and remediation recommendations to customers and senior leadership in a non-technical way.

An active Top Secret security clearance is required for this position.

This position is part of our Federal Solutions team.

The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation’s most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $157,500.00 - $283,500.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!

This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/ .