Cyber Security Engineer

This opening is for a hands\-on Cyber Security Engineer who will design, implement, maintain, and support cyber security solutions to achieve and maintain secure and compliant cloud\-based systems for a small data and software solutions organization with a focus on CMMC and HIPAA security frameworks. Job duties for this position will include… * Design, implement, and maintain system security measures to achieve and maintain compliance with assigned security frameworks, including CMMC Level 2 and HIPAA * Implement and assess security measures to ensure compliance with corporate policies * Manage system and network vulnerabilities * Conduct risk assessment of systems and provide recommendations for secure solutions * Directly configure and adjust systems settings to accomplish security controls and maintain compliance * Continually monitor and asses system security and compliance according to the assigned systems security requirements * Prepare and conduct regular system reviews to meet process and contractual mandates, such as DoD STIG reviews * Collaborate with product team members and leadership to monitor and improve overall security of systems * Collaborate with development teams to support DevSecOps operations and advise teams on vulnerabilities and best practice approaches to mitigate * Maintain meaningful and insightful metrics to measure, analyze, and monitor systems security, compliance, and security process outcomes * Maintain fluency and currency on cyber security threats and best practices for how to thwart them A strong candidate will have the following characteristics... * CISSP, CompTIA Security\+, CISM certification * Hands\-on experience with NIST 800\-171, NIST 800\-53, and CUI data * Wide range of proven technical skills and experience in strategizing, building, sustaining, and optimizing the kinds of systems and infrastructure typically employed to support the operations and product development activities of a software development team * Hands\-on experience with web application platforms and technologies * Hands\-on experience with Microsoft stack environments * Hands\-on experience with Linux\-based open source stack environments * Hands\-on experience with artificial intelligence (AI) and machine learning (ML) technologies * Proven skills and hands\-on experience with Amazon Web Services (AWS) cloud systems, especially GovCloud environments * Proven skills and hands\-on experience with Microsoft Azure cloud systems, especially US Government Cloud environments and GCC High * Hands\-on experience with the CMMC Level 2 framework, process, and controls * Hands\-on experience with the HIPAA framework, process, and controls * Experience configuring cloud\-based systems to accomplish security controls, including Kubernetes and containerized deployments * Experience with virtual networking and connectivity (VPNs, VPCs, application and platform component connectivity, etc.) * Experience responding to and resolving security events * Experience tuning server and platform performance and resolving performance issues * Experience with DevSecOps and CI/CD support * Experience with Agile development models * Experience with US Department of Defense or federal government system environments and security policies and practices (STIGs, etc.) * Experience with Zero Trust systems and implementations * Familiarity with security compliance tools, like Drata, Vanta, etc. (we use Drata) * Ability to successfully obtain a US government security clearance, if needed * Strong self\-driven work ethic with capability to be reliably productive in a work\-at\-home environment * Enthusiastic and energetic team player who enjoys collaborating as part of a mixed\-role/multi\-disciplinary group * Strong analytical and organization skills * Strong troubleshooting and systematic root cause determination skills to rapidly identify and resolve system issues * Comfortable working in a schedule\-driven environment to meet deadlines and sustain successful delivery of product * Growth\-oriented outlook with strong learning skills and capability to identify, originate, and leverage new approaches and technologies independently * Creative problem solver who can independently perceive and explore a range of solution options and quickly identify and leverage the most productive pathways * Service mindset with a strong instinct for excellence and a desire to build effective solutions to meet team and user needs and serve business objectives * Effective communicator * Flexible and adaptable to a wide range of tasks and approaches A bachelor's degree is required for this position, preferably in a computing, information systems, or related discipline. As part of the hiring process, CTA will conduct a standard commercial background check and verify I\-9 documentation, as required by law. **About CTA...** We are Computer Technology Associates (CTA), Inc (cta.com). We are a close\-knit small business providing custom\-tailored information technology solutions to client organizations. We have been in business since 1979 and have served a wide range of federal government, state government, commercial, and non\-profit clients through the course of our history. We think of ourselves first and foremost as systems engineers, and systems engineering is at the heart of our core competencies. Our pursuit day in and day out is how to strategize, define, design, build, and deliver information technology systems to solve client problems and advance their mission and business objectives. The "Oh yeah!" moment from a happy user is the ultimate accomplishment and we chase that goal relentlessly, with all the power technology can offer. This position is with our Data \& Software Solutions group supporting an ongoing custom application effort. Much of the team is based in Colorado, but we have team members all over the United States and the whole team works entirely from home. This position will be focused on strategizing and directing the group's software product quality program and operations. Someone with a proven track record leading successful quality teams and an interest in helping to build a real\-world product that gets used all day by some very appreciative users would be a great fit for this position. CTA offers competitive salaries and a competitive benefits package, of course, but even more importantly, this position offers a team\-centered environment where you can work all day with smart people who care about what they do and are proud of what they build. If you worry that working remote means being disconnected from people, you can rest easy \- the team communicates actively all day long. We utilize a variety of collaboration tools and methods to keep the team connected and working together so you always have access to your team to collaborate on a solution, resolve an issue, or briefly catch up on life. We also have a well\-developed process foundation to guide the day\-to\-day work and make sure everyone knows how they are contributing and when things are needed, so we can all readily support each other and get great product out the door on time. Sound like your kind of place? We would love to hear from you! Got questions? Just ask. We'll tell you anything you want to know. Job Type: Full\-time Pay: $95,000\.00 \- $120,000\.00 per year Benefits: * 401(k) * 401(k) matching * Dental insurance * Employee assistance program * Flexible schedule * Flexible spending account * Health insurance * Health savings account * Life insurance * Paid time off * Vision insurance Education: * Bachelor's (Required) Experience: * CMMC: 1 year (Preferred) * HIPAA: 1 year (Preferred) * Security engineering: 2 years (Required) Work Location: Remote