> Markdown version of [/jobs/ext/4442503-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/4442503-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Engineer

- **Company:** Vanguard
- **Location:** Colorado Springs, CO, United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Software Applications, Cyber Security, Identity and Access Management, Information Management, Information Security Management, Network Security, Linux System Administration, Windows Servers, SC Clearance, Tanium Platform Expertise, Information Technology, Nessus
- **Published:** October 28, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=5358c06f07ab9f2d

## About the Role

Bachelor's degree
0 to 10 years of relevant experience
DoD 8570.01-M / 8140 IAT or IAM Level II baseline certification (for example, Security+ CE)
Active Secret clearance

Preferred Qualifications
Experience as an ISSO on Missile Defense Agency or other DoD systems
Hands-on experience with eMASS and ACAS, including ACAS Operator certification
Systems administration background in Windows, Windows Server, and Linux environments
Familiarity with STIG Viewer, Tanium, Trellix, or similar endpoint security tools
CGRC (formerly CAP) or equivalent RMF-focused certification, earned or in progress
COMSEC custodial experience

## Description

Oversees the implementation of DoDD 8530.1, DoDD 8500.2, DoDI 8510.1, DoDI 8510.01, Risk Management Framework, and other applicable NIST and CNSS IA directives, instructions, and guidelines, to include interfacing with MDA Information Assurance management and case managers. Designs, develops, and implements solutions that meet network and system security requirements and performs vulnerability and risk analyses of computer systems, networks, and applications. Leads the implementation of required network security to safeguard computer systems, networks, and data in accordance with current policies and regulations.

Assesses the security risks of IT systems, networks, and software applications and documents them in formal security and risk assessments and supporting artifacts for the MDA Authorizing Official and Security Control Assessor process. Provides insight into cyber policy and technical decisions. Tests to validate established security requirements, recommends additional safeguards, supports formal testing required by government accrediting authorities, and prepares System Security Plans., Serve as primary or secondary ISSO for assigned MDA enclaves and systems
Implement RMF in accordance with NIST SP 800-37 and assess security controls against NIST SP 800-53 Rev 5
Develop and maintain System Security Plans, contingency plans, security checklists, Privacy Impact Assessments, and ATO packages in eMASS
Create and track Plans of Action and Milestones (POA&Ms), with monthly updates through remediation
Run and analyze vulnerability scans using ACAS/Nessus, and drive patching and STIG compliance with system administrators
Prepare waivers and risk exceptions for vulnerabilities that cannot be remediated
Maintain continuous monitoring of assigned systems and brief cyber posture to technical and non-technical stakeholders
Ensure compliance with FISMA, NIST, DoD, and MDA cybersecurity policy