Description
Location:
Longmont, CO (onsite)
Experience:
8 + years of combined relevant experience in systems administration, infrastructure, and/or cybersecurity
Minimum Education:
Associate degree in Information Technology or related field, or equivalent industry experience is required
Compensation:
$100,000-$130,000 depending on experience Who We Are nLIGHT-DEFENSE Systems, Inc. is one of the nation's leading developers of Directed Energy systems, which is a top modernization priority of the Department of Defense. Our High Energy Laser (HEL) systems, Adaptive Optical (AO) systems, and Acquisition / Pointing / Tracking (APT) solutions are designed to overcome the most difficult challenges facing the deployment of high energy laser solutions to the United States military and our allies. Located in Longmont, Colorado, nLIGHT-DEFENSE Systems, Inc. is a vertically integrated business that leverages internal capabilities - from semiconductor device through target identification - to develop systems that are both high-performance and cost-effective. We continue to invest in capabilities, facilities and technology to bring leading edge HEL solutions to the warfighter. This is a great opportunity to work at a company that is on the leading edge of the HEL industry and provides a culture of excellence and commitment to delivering solutions to the warfighter and our country. Headquartered in Camas, Washington, nLIGHT is a publicly listed company (NASDAQ: LASR). Summary The Senior Cybersecurity Analyst strengthens cybersecurity and maintains secure, reliable IT infrastructure at nLIGHT DEFENSE in Longmont. Reporting up to the VP of Information Security, this position works closely with the Cybersecurity team based at Global Headquarters in Camas, Washington, and cross functional partners throughout the local team and global teams to implement security controls, support compliance activities, and coordinate security operations. Approximately 60% of the role focuses on cybersecurity: CMMC/NIST compliance; vulnerability management and hands-on remediation; security monitoring, alert investigation, and incident response. The remaining 40% focuses on systems administration across servers, virtualization, identity, networking, and endpoints with support concentrated on complex escalations and infrastructure needs. All applicants must possess or be qualified to obtain a U.S. DoD Personnel Security Clearance. Preference will be given to candidates with an existing U.S. DoD Personnel Security Clearance.Further information on requirements to obtain a security clearance is available at:https://www.dcsa.mil/mc/pv/mbi/gicp/.Please review this information before applying.
Responsibilities
- Implement, maintain, and validate security controls aligned with CMMC, NIST SP 800-171, DFARS, and internal security requirements in coordination with the Cybersecurity team.
- Maintain audit-ready documentation and evidence, including system configurations, access reviews, change records, remediation activities, operating procedures, and assessment support materials.
- Apply and maintain approved security baselines, including CIS and STIG standards, across Windows and Linux systems while managing exceptions and corrective actions.
- Administer and support identity and access management processes, including least-privilege permissions, privileged account management, periodic access reviews, and account lifecycle administration.
- Conduct vulnerability assessments, review scan and penetration testing results, prioritize findings based on risk, and coordinate remediation activities with system owners and stakeholders.
- Perform hands-on remediation through patching, configuration changes, access controls, and other approved mitigation measures, validating effectiveness through testing and rescanning.
- Monitor, investigate, and respond to security events and alerts across Microsoft 365, SIEM, EDR, identity, network, and infrastructure platforms; document findings and support incident response activities.
- Administer, maintain, and optimize security technologies, infrastructure systems, and monitoring capabilities while recommending improvements to strengthen the organization's security posture.
- Administer and support Windows and Linux servers, virtualization platforms, Active Directory, Microsoft Entra ID, Microsoft 365 services, and related enterprise infrastructure.
- Maintain secure system configurations, operating system and application patching, backup and recovery processes, and disaster recovery procedures for supported environments.
- Support network and infrastructure services including DNS, DHCP, VPN, VLAN, firewall, and connectivity-related administration in coordination with infrastructure owners.
- Troubleshoot complex infrastructure and security-related issues, perform root cause analysis, automate repeatable administrative tasks through scripting and configuration management tools, and maintain technical documentation, system procedures, and operational runbooks.
- Participate in scheduled maintenance activities, on-call rotations, compliance assessments, and continuous improvement initiatives as required.
Required Experience
- At least 8 years of combined relevant experience in systems administration, infrastructure, and/or cybersecurity, including at least 3 years of hands-on cybersecurity experience.
- Associate degree in Information Technology, Cybersecurity, or a related field, or equivalent relevant industry experience.
- Practical experience implementing and documenting security controls in a regulated environment, with working knowledge of CMMC and NIST SP 800-171 requirements.
- Hands-on experience with vulnerability assessment, risk-based prioritization, patching, configuration remediation, and validation of corrective actions.
- Experience investigating security alerts and participating in incident response, including escalation, documentation, and coordinated containment or recovery.
- Strong administration and troubleshooting skills across Windows Server, enterprise identity, Microsoft 365, virtualization, and core networking.
- Practical Linux administration experience, including securing and maintaining systems and OS images.
- Understanding of TCP/IP, LAN/WAN architecture, firewalls, access controls, and least-privilege principles.
- Ability to script or automate administrative and security tasks, maintain clear technical documentation, and communicate risks and remediation needs to technical and nontechnical stakeholders.
- Commitment to excellence, attention to detail, pride in workmanship, sound judgment, and a collaborative customer-service mindset.
Desired Experience
- Experience supporting CMMC assessments, NIST control evidence, DFARS-related security activities, SOX controls, or other defense-sector compliance programs.
- Experience with Microsoft 365 GCC High, Microsoft Purview compliance capabilities, Exchange Online, and Microsoft Entra ID.
- Experience with SIEM, EDR, and vulnerability scanning platforms, such as Nessus, and with security tool configuration and tuning.
- Experience with Hyper-V and/or VMware; FortiGate or comparable firewalls; Duo, Keeper, or similar identity and privileged access tools; and endpoint management platforms.
- Experience with PowerShell, Ansible, Packer, or comparable scripting, automation, and configuration management tools.
- Relevant cybersecurity or infrastructure certifications, such as CISSP, Security+, CySA+, or comparable credentials.
- Experience in aerospace and defense, manufacturing, engineering, or cleanroom environments.
Benefits Summary:
- 4 weeks of Paid Time Off per year
- 11 paid Holidays
- Employee Stock Purchase Plan
- Tuition Assistance Program
- Health (ACA Gold Plan), Vision and Dental Care paid by employer 100% for Employee and 75% for Dependents
- Paid Family Leave, Short and Long Term Disability paid by employer 100%
- Competitive 401k with company match and immediate vesting
Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or age. For more information about our commitment to equal employment opportunity, please see this government poster: Know Your Rights: Workplace Discrimination is Illegal. If you are an individual with a disability and need a reasonable accommodation in the application or hiring process, please contact Human Resources at [emailprotected]. Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or age. For more information about our commitment to equal employment opportunity, please see these government posters: “EEO is the Law” and its accompanying temporary supplement. If you are an individual with a disability and need a reasonable accommodation in the application or hiring process, please contact Human Resources at (360) 566-4460 or Hr@nlight.net. Apply at: https://ipc.us/t/63A4B3E223F1493C.
