Cybersecurity Engineer

What You'll Do:
As the Cybersecurity Specialist, you will work directly with the Director, Compliance & Security and cross-functional stakeholders to establish and maintain company network infrastructure in compliance with government and regulatory standards.  These processes and procedures will enable the company to remain secure as we scale our products and grow market share.  As the cybersecurity engineer, you will be responsible for improving the company’s cybersecurity and compliance posture by implementing, maintaining and improving security tools.You will help safeguard the sensitive company data and also help perform root cause analysis in the event of a cyber incident, the audit process. 

• Establish, implement and manage Slingshot’s corporate network (combination of on- premise and cloud network solutions) to ensure NIST 800-171 and CMMC 2.0 Level 2 compliance

• Manage cybersecurity technologies, and support the implementation of policies and procedures. 

• Identify, respond, and remediate cybersecurity detections, incidents, and anomalies to reduce information and information technology (IT) risks. 

• Work cross functionally with the engineering team and DevOps team to support securing Slingshot applications and the development process. 

• Must be a U.S. citizen eligible for government clearances

• 5+ years of experience within the cybersecurity industry experience
• DoD 8140 IAT Level II Certification or higher
• Working knowledge of the configuration and management of MacOS, Windows, and Linux distributions
• Experience in supporting a remote work environment using mobile device management solutions
• Experience in network security (firewalls, VPN, ZTNA, WAF, FWaaS, SASE)
• Experience with reviewing vulnerability scans within various computer systems and environments.
• Hands-on experience with building, operating, or maintaining security tools such as SIEM, EDR, vulnerability management, IdP and MDM.
• Research and recommend innovative, and potentially automated approaches for cybersecurity tasks.
• Ability to effectively work under tight deadlines 
• Strong quantitative and problem-solving skills
• Strong communication skills working with varied internal teams

• Experience with startup business development or sales operations
• Experience working at a fast-paced, data-driven business environment
• Understanding of DevSecOps concepts and principles.
• Knowledgeable of the Risk Management Framework as provided by NIST Special Publication (SP) 800-37, controls provided in NIST SP 800-53, and assessments provided by NIST SP 800-53A and derived policies, such as Intelligence Community Directive Number 503 (ICD-503) or the Joint Special Access Program (SAP) Implementation Guide (JSIG)
• Experience with auditing and verifying security controls in accordance with government requirements
• Familiarity with MITRE ATT&CK/D3FEND, Zero Trust Architecture concepts, and relevant implementations