Information System Security Engineer

About this position: Information System Security Engineer  in Colorado Springs, CO  

The Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the position.

Applicants will be notified via email or phone within ten business days regarding application status.

This position is contingent upon award of contract.

Essential Duties & Responsibilities

· Serve as the Information System Security Engineer (ISSE) responsible for integrating cybersecurity and information assurance requirements into the design, development, implementation, and sustainment of information systems.

· Apply security engineering principles throughout the system development lifecycle (SDLC) to ensure the confidentiality, integrity, availability, authenticity, and non-repudiation of systems and data.

· Support Risk Management Framework (RMF) activities, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.

· Develop and maintain cybersecurity engineering artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and security architecture documentation.

· Collaborate with Information System Security Managers (ISSMs), System Administrators, Network Engineers, Program Managers, and Government representatives to ensure security requirements are incorporated into system designs.

· Conduct security engineering analyses, vulnerability assessments, system risk evaluations, and technical reviews.

· Review system architectures, network diagrams, hardware configurations, software implementations, and technical documentation to ensure compliance with cybersecurity requirements.

· Evaluate and implement security controls in accordance with NIST, DoD, Intelligence Community, and organizational requirements.

· Support system accreditation and authorization efforts for classified and unclassified information systems.

· Assist with the implementation of secure network architectures, boundary protection mechanisms, encryption technologies, and access control solutions.

· Analyze cybersecurity vulnerabilities and recommend mitigation strategies to reduce operational risk.

· Support security testing, penetration testing coordination, vulnerability scanning, and cybersecurity inspections.

· Develop cybersecurity policies, procedures, standards, and implementation guidance.

· Participate in engineering design reviews, configuration control boards, and technical working groups.

· Provide technical cybersecurity recommendations to program management and senior leadership.

· Support incident response, continuous monitoring, audit activities, and cybersecurity compliance initiatives.

Required (Minimum Necessary) Qualifications

·         Education Requirements:Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, Mathematics, or a related technical field. Additional years of relevant experience may be substituted for education requirements.

·         Minimum of 5 years of experience in cybersecurity, information assurance, information security engineering, systems engineering, or related technical disciplines.

·         Experience implementing the Risk Management Framework (RMF) for DoD or Federal Government systems.

·         Experience developing and maintaining cybersecurity documentation and accreditation packages.

·         Experience conducting security control implementation, assessment, and compliance activities.

·         Experience supporting system engineering efforts throughout the system lifecycle.

·         Familiarity with network security, operating system security, endpoint protection, and cloud security concepts.

·         Experience identifying, analyzing, and mitigating cybersecurity risks and vulnerabilities.

·         Strong technical writing and documentation skills.

·         Ability to communicate effectively with technical and non-technical stakeholders.

·         Must possess or be eligible to obtain and maintain a Top Secret security clearance.

Knowledge, Skills, Abilities, and Other Characteristics

·         Thorough knowledge of cybersecurity engineering principles and best practices.

·         Working knowledge of NIST RMF, NIST SP 800-53, CNSSI, DoD Cybersecurity policies, and applicable federal regulations.

·         Understanding of security architecture, network design, secure system engineering, and defense-in-depth strategies.

·         Knowledge of operating systems including Windows, Linux, and virtualized environments.

·         Familiarity with enterprise cybersecurity tools, intrusion detection systems, vulnerability scanners, SIEM platforms, and endpoint security technologies.

·         Understanding of Public Key Infrastructure (PKI), encryption technologies, identity management, and access control solutions.

·         Ability to evaluate technical vulnerabilities and develop effective remediation plans.

·         Strong analytical, troubleshooting, and problem-solving skills.

·         Ability to work independently and as part of a multidisciplinary engineering team.

·         Proficiency with Microsoft Office Suite and cybersecurity management tools.

·         Knowledge of organizational procedures and workflows – understanding how work moves through a company.

·         Basic knowledge of relevant technologies or tools – e.g., Microsoft 365, communication platforms, or industry‑standard software.

·         Knowledge of customer service practices – principles of providing quality service and managing inquiries professionally.

·         Knowledge of data privacy and confidentiality principles – awareness of proper handling of sensitive information.

·         Communication skills (written and verbal) – ability to convey information clearly and professionally.

·         Time management and prioritization – balancing multiple tasks and meeting deadlines.

·         Problem‑solving and critical thinking – analyzing issues and selecting appropriate solutions.

·         Interpersonal and teamwork skills – building rapport and collaborating effectively with others.

·         Attention to detail – producing accurate, error‑free work.

Preferred

· Active Top Secret clearance with SCI eligibility or current TS/SCI clearance.

· DoD 8570/8140 certification such as Security+, CISSP, CASP+, CISM, CAP, GSLC, or equivalent.

· Experience supporting Air Force, Space Force, Army, Navy, SOCOM, Intelligence Community, or other Federal Government environments.

· Experience supporting cloud environments including Azure Government, AWS GovCloud, or hybrid architectures.

· Experience supporting classified systems, SCI environments, and Special Access Programs (SAPs).

· Knowledge of Zero Trust Architecture principles and implementation strategies.

· Experience with ACAS, SCAP, Nessus, HBSS, Endpoint Security Solutions (ESS), Splunk, or similar cybersecurity platforms.

· Experience supporting DevSecOps, Secure Software Development, and CI/CD security initiatives.

· Familiarity with ICD 503, CNSS policies, and Intelligence Community cybersecurity requirements.

· Prior experience as an ISSO, ISSM, Cybersecurity Engineer, Systems Engineer, or Security Architect.

Necessary Physical Requirements

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this role. Employees must always maintain a constant state of mental alertness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

· Must be able to sit and work at a computer workstation for extended periods (frequently).

· Must be able to analyze technical documentation, architectures, and cybersecurity reports (frequently).

· Must be able to communicate effectively during technical meetings, reviews, and presentations (frequently).

· Must be capable of conducting system reviews, inspections, and assessments within office and secure facility environments (occasionally).

· Must be able to lift up to 20 pounds of computer equipment, documentation, or materials (occasionally).

· Must be able to travel in support of cybersecurity assessments, engineering reviews, and customer requirements (occasionally).

Work Environment

The work environmental characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of the role. Employees must always maintain a constant state of situational awareness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Physical Setting:

· Primarily performed in government offices, engineering facilities, data centers, secure facilities, and classified environments.

· Work may occur within both classified and unclassified network environments.

· Frequent interaction with system engineers, cybersecurity professionals, program managers, government personnel, and contractors.

Schedule and Flexibility:

· Standard full-time schedule.

· Occasional extended hours may be required to support cybersecurity incidents, accreditation activities, vulnerability remediation efforts, testing events, and program milestones.

· Flexibility required to meet mission requirements and emerging cybersecurity priorities.

Other Pertinent Work Details:

· Must maintain all required security clearances and access authorizations.

· Position may require access to classified information up to the Top Secret/SCI level.

· Requires compliance with all government cybersecurity regulations, policies, and organizational procedures.

· May support multiple systems, programs, and customer organizations simultaneously.

· Requires a high degree of technical competence, integrity, attention to detail, and sound judgment.

Supervisory Responsibilities

·         This position will not have supervisory responsibilities.

DOT Covered/Safety-Sensitive Role Requirements

·         This position is not subject to federal requirements regarding Department of Transportation “safety-sensitive” functions.

Additional Qualifying Factors

As a condition of employment, you will be required to pass a pre-employment drug screening and have acceptable background check results. If applicable to the contract, you must also obtain and maintain the appropriate clearance levels required and must also be able to obtain access to military installations.

Shareholder Preference

BSNC gives hiring, promotion, training, and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job.

Bering Straits Native Corporation is an equal opportunity employer.  All applicants will receive consideration for employment without regard to any status protected by state or federal law, or any other basis prohibited by law.