Cybersecurity Senior Systems Engineer

Responsibilities

• Lead or materially influence cybersecurity architecture and security overlay decisions.
• Integrate Program Protection measures for critical program information, mission-critical technologies, system designs, and supply-chain considerations.
• Coordinate with systems engineering, program management, cybersecurity, intelligence, authorization, and operational stakeholders throughout the system life cycle.
• Support software security in the DevSecOps pipeline, including dashboard construction, scan automation, security posture reviews, and security configuration management.
• Tune IA scanning tools and automation for ATO needs and controls, and support STIG hardening.
• Develop security requirements, automation templates, best practices, technical documentation, and cybersecurity strategies.
• Perform vulnerability, risk, criticality, critical functionality, and critical component analyses supporting RMF and Assessment and Authorization.
• Develop and maintain RMF package components, risk assessments, test plans, and cybersecurity-focused test events such as CVPA and adversarial assessments.
• Draft Program Protection Plans, Security Classification Guides, Anti-Tamper Plans, and other Navy acquisition security documents.
• Review systems, networks, software designs, and security solutions for risks, mitigations, integration issues, and classified-information handling requirements.
• Provide technical analysis and recommendations for Battlespace Awareness infrastructure, information-access capabilities, and software tools.

Requirements

• Bachelor's degree in cybersecurity, software, computer science, or a related field with nine or more years of experience, or a master's degree with seven or more years of experience.
• Four additional years of experience may substitute for a bachelor's degree.
• Active TS/SCI security clearance.
• Experience with Information Assurance, cybersecurity engineering, RMF implementation, Program Protection engineering, vulnerability and risk assessment, and DoD systems.
• Understanding of the DoD acquisition process, PAE MS, and NAVWAR is desired.
• Certifications such as PMP, INCOSE, DevOps, CISSP, CISM, CISA, Security+, and Network+ are desired.
• Prior military experience with ISR systems and experience with RMF and NIST compliance standards are desired.
• Knowledge of US Navy C4I systems, Linux or Windows operating systems, network protocols, web services, databases, scripting, and firewalls is desired.