Cybersecurity Senior Systems Engineer

TS/SCI-cleared Senior/Lead Cybersecurity Systems Engineering candidate with extensive experience in Information Assurance (IA), cybersecurity engineering, Risk Management Framework (RMF) implementation, and Program Protection engineering to support various Intelligence, Surveillance, and Reconnaissance (ISR) programs, Signals Intelligence (SIGINT) systems, and tactical data broadcast capabilities for a Department of Defense (DoD) customer within Portfolio Acquisition Executive Mission Systems (PAE MS). The selected individual will serve as a senior technical authority for the integration of cybersecurity, RMF, and Program Protection requirements throughout the system life cycle.

Responsibilities:
• Lead or materially influence cybersecurity architecture decisions
• Integrate Program Protection measures to protect critical program information, mission-critical technologies, system designs, and supply-chain considerations
• Close coordination with system engineers, program management, cybersecurity personnel, intelligence stakeholders, authorization officials, and operational users to ensure security and protection requirements are incorporated early and maintained throughout design, development, test, deployment, sustainment, and modernization
• Software Engineering with emphasis on Security in the DevSecOps pipeline
• Dashboard construction aggregating pipeline outputs to reporting tools
• Align IA related scanning tools with ATO needs/controls by tuning configurations and automation and support teams with STIG hardening
• Write best practices and automation templates related to maintaining security posture of software under development
• Review current processes, tech stack, and scans to improve efficiency of maintaining security posture of software under development
• Develop cogent and actionable security requirements that result in robust security postures, heightened cyber resilience and protection of sensitive data/information.
• Perform vulnerability/risk assessment analysis to support Assessment and Authorization (A&A)
• Design security architecture overlays to overarching system architectures that deliver increased security balanced against time and cost metrics.
• Provides secure configuration management in support of information systems, security software, hardware and firmware.
• Draft Program Protection Plans (PPPs), Cybersecurity Strategies, Security Classification Guides (SCGs), Anti-Tamper (AT) Plans and other Navy Acquisition program security-related documents.
• Perform Criticality Analyses (CAs) to include Critical Program Information (CPI) surveys. Perform Critical Functionality (CF) and Critical Component (CC) identification reviews.
• Review proposed new systems, networks, and software designs for potential security risks, recommending mitigations or countermeasures and resolving integration issues.
Provide technical assistance and recommendations regarding the planning, implementation, and management of Battlespace Awareness with existing and emerging infrastructures.
• Perform General Service (GENSER) and Sensitive Compartmented Information (SCI) Risk Management Framework (RMF) support for Department of Defense (DoD) IT systems to include development and maintenance of RMF package components, conduct risk assessments and develop test plans.
• Assist in development and update of technical documentation for system development.
• Use operational experience to interpret and provide feedback on system requirements.
Provide analysis of capabilities and software tools and recommendations for technical solutions to access and exploit information available from source as required.
Assist the customer with Test and Evaluation (T&E) cybersecurity-focused test events [e.g., Coordinated Vulnerability Penetration Assessment (CVPA) and Adversarial Assessment (AA)].
• Evaluate security solutions to ensure they meet security requirements for processing classified information.

• EDUCATION AND EXPERIENCE: Cybersecurity/Software/CS related BS and nine (9) years or more experience; Masters and seven (7); 4 additional years of experience in lieu of BS degree.
• Active TS/SCI.

Desired Skills and Certifications:
• Understanding of the DoD acquisition process, PAE MS, and NAVWAR.
• Certifications: PMP, INCOSE, DevOps, CISSP, CISM, CISA, Security+, Network+.
• Prior Military experience with ISR systems.
• Experience with RMF and NIST compliance standards.
• Experience with US Navy C4I systems, Information Assurance and Cybersecurity.
• Knowledge of Linux or Windows OS, network protocols, web services, databases, scripting, and firewalls.