> Markdown version of [/jobs/ext/4111055-p28961-cybersecurity-engineer-iii](https://www.wearedevelopers.com/jobs/ext/4111055-p28961-cybersecurity-engineer-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# P28961 Cybersecurity Engineer III

- **Company:** Sierra Space
- **Location:** Louisville, CO, United States
- **Experience:** Experienced
- **Salary:** $122,109.0 - $167,899.0
- **Contract:** Permanent contract
- **Skills:** Data Analysis, Software System Penetration Testing, Configuration Management Databases, Configuration Management, Cyber Security, Security Information and Event Management, Systems Integration, Trusted Systems, Software Vulnerability Management, Computer Network Technologies, Cisco, Qualys, Vulnerability Analysis
- **Published:** October 5, 2026
- **Apply:** https://diversityjobs.com/career/18542957/P28961-Cybersecurity-Engineer-Iii-Colorado-Louisville

## About the Role

* Requires Bachelor's degree in a related field (or equivalent work experience in lieu of degree or Masters +3 years experience).
 * Typically 5+ years of related experience.
 * Certifications: (1 or more required) GIAC (Global Information Assurance Certification), network technology certifications such as a CCNP (Cisco Certified Network Professional), or SANS level 300 courses.
 * Knowledge of one or more: emerging technologies, emerging threats, emerging regulatory requirements.
 * Knowledge of secure systems architecture.

Preferred Qualifications:

 * Ability to obtain and maintain a U.S. security clearance
 * Demonstrated experience operating or engineering an enterprise vulnerability management program across diverse technology environments.
 * Hands-on experience with vulnerability assessment and management platforms such as Tenable, Qualys, Rapid7, or equivalent tools.
 * Experience developing risk-based vulnerability prioritization methods using severity, exploitability, asset criticality, threat intelligence, and business impact.
 * Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, and third-party teams in a large or complex enterprise.
 * Experience with vulnerability exception management, compensating controls, risk management, remediation validation, and service-level reporting.
 * Proficiency with asset discovery, inventory reconciliation, scan configuration, credentialed scanning, authenticated assessment, and vulnerability data quality management.
 * Experience integrating vulnerability management platforms with ticketing, CMDB, SIEM, GRC, orchestration, or reporting systems.
 * Experience translating vulnerability data into executive-level risk reporting, dashboards, metrics, and actionable remediation plans.
 * Knowledge of common vulnerability scoring and prioritization standards, including CVE, CVSS, CWE, CISA KEV, and related threat intelligence sources.
 * Certifications such as CISSP, CISM, CISA, CCSP, GIAC, or a vulnerability-management-related certification.
 * Strong technical leadership, communication, analytical, project management, and mentoring skills.

## Description

* Support the enterprise vulnerability management program across infrastructure, endpoints, applications, cloud environments, and network devices.
 * Develop and maintain vulnerability scanning strategies, schedules, configurations, coverage metrics, and operating procedures.
 * Analyze vulnerability scan results and threat intelligence to validate findings, assess exploitability and business impact, and prioritize remediation using a risk-based approach.
 * Coordinate with infrastructure, application, cloud, network, and business teams to assign, track, and verify remediation activities within established service-level targets.
 * Provide technical guidance on remediation options, compensating controls, exception requests, and risk acceptance decisions.
 * Monitor vulnerability management dashboards, trends, and key performance indicators; prepare clear executive and technical reports on exposure, remediation progress, and residual risk.
 * Investigate discrepancies in scan coverage, vulnerability data, and remediation status to improve the accuracy and completeness of enterprise reporting.
 * Integrate vulnerability management processes and data with asset management, configuration management, ticketing, SIEM, GRC, and other security platforms.
 * Support vulnerability assessments, penetration testing, compliance assessments, and audits by providing evidence, technical analysis, and remediation status.
 * Develop scripts, workflows, and other automation to improve scanning, data analysis, ticket creation, reporting, and remediation verification.
 * Stay current on emerging vulnerabilities, exploitation trends, security advisories, and defensive technologies, and communicate relevant risks and recommended actions to stakeholders.