Senior Information Security Specialist

Please review the job details below.

*Contingent upon award of contract*

Maxar is seeking a solutions-oriented Senior Information Security Specialist to contribute to solving unique and challenging technical problems in an agile and fast-paced team environment in support of our customer’s national security mission.  We are seeking people who embrace new technology and processes and thrive in a culture of continuous improvement.  The ideal candidate will value both teamwork and independent problem-solving to contribute to a small, multi-disciplinary team of full-stack software developers, integration engineers and security professionals to achieve dynamic goals on a rigorous schedule.  Maxar encourages strong contributors who demonstrate growth potential with career advancement opportunities to advance deeper into the Information System Security and DevSecOps professions.

Note: US citizenship and active TS/SCI is mandatory.

Location:  Westminster, Colorado

Principal Responsibilities:

• Lead system security posture while maintaining mission-critical functionality by tracking and remediating IAVM vulnerabilities and STIG configuration controls as a contributor to an experienced Information Assurance team.
• Maintain on-prem hardware and virtual servers in a laboratory environment as well as remote and cloud-based production servers and confer with software developers and systems engineers to develop iterative operational improvements
• Lead Information Assurance (IA) team, to include subcontractors, to include maintaining remediation schedule and reprioritizing tasks to achieve and maintain ATO.
• Maintain good working relationship with customer IA staff and subcontractor IA staff
• Work with software and system engineers to apply automated tests and documented processes.
• Integrate static code analysis and other security mechanisms into CI/CD pipeline.
• Troubleshoot and resolve network, virtualization, and software configuration issues.
• Communicate with multidisciplinary team and articulate technical concepts and ideas effectively.

Skills Required

• 6+ years of technical experience maintaining information systems and security controls in a software development and integration environment
• Experience with container platform or orchestration software administration and/or software development or build pipeline administration
• Experience with virtualization software
• Demonstrated experience with Linux administration
• Communicates effectively with a team both verbally and in writing
• Experience with image processing software and troubleshooting bugs created by Security updates
• Willingness to work onsite 60% or as needs dictate
• Bachelor’s or higher in a Computer Science / Information Technology, Mathematics or Engineering field from an accredited college or university
• Active CompTIA Security+ or equivalent or higher certification
• US citizenship and must have current TS/SCI clearance
• Must have knowledge of TCP/IP, information security/authorization profiles, or security administration of Unix or NT network/systems.
• Must be capable of developing security accreditation/certifications documentation, and creating maintaining security policy and procedures.
• Experience with Microk8s and Docker registry administration

Additional Skills Desired

Some familiarity in these areas would be fabulous.

• Can work independently in a fast-paced dynamic environment and manage multiple priorities
• Experience with automated vulnerability scanning and/or static code analysis software
• Strong Red Hat Linux skills
• Python and/or BASH scripting skills
• Familiarity with NIST 800-171 or NIST 800-53 compliance frameworks
• Familiarity with common industry software tools and common IT and software development concepts and best practices
• Familiarity with VMware virtualized environment
• Familiarity with ground station information systems used by the intelligence community, geospatial context, and/or big data analytics
• Experience with PostgreSQL database administration
• Experience securing API endpoint communication in a custom application
• Experience implementing TLS and certificate-based endpoint authentication
• Experience with technical subcontractor management
• Experience with technical proposal writing
• Experience with System Security Plan SOP writing for DoD accredited systems
• Experience with the Army ATO requirements and process

Our salary ranges are market-driven and set to allow for flexibility. Individual pay will be competitive based on a candidate’s unique set of knowledge, skills, and geographic diversity, with earnings potential commensurate with experience. The range for this position is:

$104,000.00 - $174,000.00 annually.

 

Maxar employees must follow all applicable Maxar policies and COVID-19 requirements as well as those of Maxar customers and third parties. Individual job requirements may vary, and Maxar reserves the right to modify its policies and requirements as it deems appropriate in accordance with applicable law.

Maxar Technologies values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.