Senior Cyber Security Engineer
Job Description
Senior Specialist role applying Systems Security Engineering methods to architect, design, evaluate, integrate, and authorize secure systems and networks in support of customer requirements.
Responsibilities
- Apply current Systems Security Engineering methods to the architecture, design, development, evaluation, and integration of secure systems and networks.
- Partner with Government customers to define and implement security protection needs, concerns, and requirements with fidelity and rigor across the system life cycle.
- Collaborate with systems developers and commercial product vendors to design and evaluate secure state-of-the-art systems, networks, and database products.
- Use security methods including encryption, vulnerability analysis, and security management.
- Integrate multiple security methods into a cohesive security perimeter and environment, including policies and procedures to monitor and maintain that environment.
- Prepare Certification and Accreditation (C&A) documentation under RMF and derivative processes (DoD 8510, JSTIG, ICD-503, CNSSI 1253) to support security authorization.
- Represent program security needs, concerns, and requirements at customer meetings.
- Conduct Certification of Cryptographic High Assurance Devices.
- Support High Assurance product work, including IASRD and SERD requirements.
- Configure and use cyber defense and vulnerability assessment tools such as ACAS and SCC.
- Assess security and privacy controls in embedded systems using NIST 800-53.
- Execute RMF accreditation and authorization (A&A), including steps 1-4: categorization, controls selection, control implementation, and security assessment.
- Develop and package Standard of Evidence (BoE) materials and support A&A package processing.
- Support RMF accreditation of Platform IT (PIT) systems.
- Support security engineering activities including basis of estimate development, requirements development, design, testing, configuration management, and maintenance of information systems and data.
- Provide DoD software selection and approval support for COTS, GOTS, and FOSS.
- Support evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability response projects.
- Assist program security teams in developing policies and procedures for emerging security technologies.
- Perform work 100% onsite in a lab environment; no remote support options.
Requirements
- Bachelor’s Degree with a minimum of 6 years of prior relevant experience.
- OR Graduate Degree with a minimum of 4 years of prior related experience.
- OR in lieu of a degree, minimum of 10 years of prior related experience.
- Minimum Collateral Secret security clearance required.
Technologies
- ACAS
- SCC
- NIST 800-53
- RMF
- DoD 8510
- JSTIG
- ICD-503
- CNSSI 1253
- NIST 800-160
- DoD 5200.39
Preferred Additional Skills
- Experience with developing and certifying High Assurance Devices on embedded systems.
- Experience with RMF A&A on embedded systems.
- Experience developing and implementing System Security Engineering for protection of CPI throughout the System Development Lifecycle.
- Assess systems for Critical Program Information (CPI).
- Conduct trade studies and develop System Security Engineering requirements.
- Perform threat assessment via attack/countermeasure analysis.
- Conduct Verification and Validation activities.
- Use DoD 5200.39 for identification and protection of CPI.
- Engineer trustworthy and secure systems aligned to NIST 800-160.
- Develop and implement comprehensive Program Protection Plans (PPP) to safeguard CPI and technologies.
- Draft PPP, Cybersecurity Strategies, Security Classification Guides (SCGs), and System Security Engineering Plans.
- Interact with customers to define System Security Engineering requirements, solutions, trades, costs, implementation, system impacts, and effectiveness.
- Self-starter who can operate with little supervision in diverse environments.
- Track record planning, executing, and tracking personal task assignments.
- Experience leading small product development teams and mentoring other engineers.
- Minimum Collateral Secret security clearance required.
Benefits
- Health and disability insurance
- 401(k) match
- Flexible spending accounts
- EAP
- Education assistance
- Parental leave
- Paid time off
- Company-paid holidays