Systems Security Engineer

Based at Wright-Patterson AFB, this Systems Security Engineer role supports secure embedded DoD-focused systems and networks throughout their lifecycle, with a focus on security architecture, RMF/A&A activities, and anti-tamper considerations in embedded avionics. The position demands applying DoD and Air Force engineering principles to enhance performance and sustainability of weapon systems, translating requirements into robust security specifications, and guiding risk management and accreditation efforts.

Responsibilities

• Apply an understanding of DoD, Air Force and common engineering/scientific principles, processes and procedures to improve performance and sustainability of existing and future weapon systems.
• Translate user requirements into weapon system requirements which will be used to design, develop, fabricate, test and evaluate weapon systems, subsystems and equipment for eventual fielding and deployment.
• Perform technical/mission analyses of existing and future operational requirements, assist in developing systems concepts and perform technical trade-off assessments of designs/modifications.
• Develop and maintain Risk Management Framework documentation necessary to obtain Authorizations including but not limited to the System Security Plan (SSP), Architecture Analysis Report (AAR), Continuous Monitoring Plan, Security Control Traceability Matrix (SCTM), Security Assessment Report (SAR) and Risk Assessment Report (RAR).
• Provide support to produce or review technical documentation for acquisition programs including Cybersecurity Strategy, Test and Evaluation Master Plan (TEMP), Clinger-Cohen Act Compliance, Capabilities Development Document, Concept of Operations and more.
• Support system engineering and program management in conducting and reviewing milestone documentation including System Requirements Review (SRR), Preliminary Design Reviews (PDR), Critical Design Reviews (CDR) and Program Management Reviews (PMR).
• Perform information system security engineering tasks, ensuring that information security requirements are properly implemented throughout the processes of security architecture, design, development, configuration, and implementation.
• Develop, implement, and enforce information systems security policies ensuring system security requirements are addressed during all phases of the acquisition and Information System lifecycle.
• Review, analyze and validate system security designs within embedded avionics systems to validate security control and architecture implementations
• Conduct Assessment & Authorization (A&A) tasks in accordance with the Risk Management Framework (RMF) and National Institute of Standards and Technology (NIST) policy; identify deficiencies and provide recommendations of risk mitigation to program management.
• Employ best practices when implementing security controls, including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques
• Integrate/Develop new techniques to improve Confidentiality, Integrity, and Availability for networks/systems operating at various classification levels
• Assist program managers, system engineers and cyber test engineers in conducting Mission Based Cyber Risk Assessments
• Identify points of vulnerability, non-compliance with established cybersecurity standards and regulations, and recommend mitigation strategies
• Apply knowledge of cybersecurity policy, procedures, and workforce structure to implement secure networking, computing, and enclave environments
• Identify system and/or network designs that encompass multiple enclaves to include those with differing data protection/classification requirements

Requirements

• Education: BS degree from an accredited university including classes in Computer Science, Cybersecurity, Electrical/Electronics/Systems/Computer Engineering, or related field.
• Experience: 5+ years of experience in systems security architecture or engineering, ideally within a government or DoD environment.
• Certifications: Relevant certifications related to a Security Architect in accordance with DoD 8140 (CISSP, CISM, CCSP).
• Knowledge: Deep understanding of cybersecurity frameworks (NIST) and standards, RMF, DISA STIGs, and system accreditation processes.
• Technical Skills: Expertise with security concerns in avionics, embedded systems, Operational Technology and Supervisory Control and Data Acquisition systems. Familiarity with network security, firewalls, intrusion detection/prevention systems, secure coding practices, and vulnerability scanning tools.
• Must possess an active Top Secret clearance with eligibility for SCI.

Technologies

• NIST
• Risk Management Framework (RMF)
• DISA STIGs
• Firewalls
• Intrusion Detection/Prevention Systems
• Vulnerability Scanning Tools
• Secure Coding Practices

Benefits

• Vacation
• Health Insurance
• Flexible Schedules
• Professional Development
• ESOP
• 401k Match
• Bonus Program
• Mentorship

DESIRED

• Experience with government contracting and DoD security program management.
• Familiarity with scripting, automation tools, and secure system integration techniques.
• Understanding of cloud security in classified environments.

Travel

20% anticipated travel, but could vary

Why MTSI is a great place to work

• Interesting Work: Our co-workers support some of the most important and critical programs to our national defense and security.
• Values: Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.
• 100% Employee Owned: We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.
• Great Benefits - Most Full-Time Staff Are Eligible for:
• Starting PTO accrual of 20 days PTO/year + 10 holidays/year
• Flexible schedules
• 6% 401k match with immediate vesting up to $9k annually
• Semi-annual bonus eligibility (July and December)
• Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
• Up to $10,000 in annual educational reimbursement
• Other company funded benefits, like life and disability insurance
• Optional zero deductible Blue Cross/Blue Shield health insurance plan
• Track Record of Success: We have grown every year since our founding in 1993.