Cyber Systems Engineer (Level 3 or 4)

Description

The company builds systems for national security space missions, and this role supports those missions, which require highly trustworthy personnel.

The team works on complex problems that protect the nation. The role covers ground, communications and space segments of space systems, and it calls for prior work in securing complex systems that apply to space.

The role can be filled at Cyber Systems Engineer level 3 or level 4. Training on any language, program or platform you do not already know is provided.

Responsibilities

• Join an integrated product team to design, build and meet RMF cybersecurity, cyber resilience and cyber survivability requirements for satellites, communication links and ground command and control systems, working with several engineering disciplines on secure system design.
• Break system-level security controls down into technical performance requirements for each segment and component, covering program protection, anti-tamper, TEMPEST, RMF cybersecurity and cryptographic component integration. Make sure cyber requirements are tracked in the formal requirements process, and act as the cyber and SSE contributor for a segment or subsystem.
• Carry out attack surface analysis and write System Security Plans for complex space systems, including Risk Assessment Reports, Security Control Traceability Matrices, Security Assessment Procedures and POA&Ms.
• Deploy and maintain commercial security products such as firewalls, antivirus, two-factor authentication and SIEM tools in terrestrial systems.
• For space segments, help design and implement hardening of space vehicle embedded processors and flight software.
• Write and run assessment procedures that confirm conformance with commercial, federal civilian, DoD, intelligence community and special access program security controls and survivability requirements, based on each customer and system.
• Work in an Agile environment, helping triage static code analysis findings from tools such as Fortify and ranking them as technical debt in the software lifecycle backlog.
• Join small teams building, assembling, integrating and testing security-critical components such as cross domain solutions, cryptographic devices and controlled interfaces.
• Securely deploy Mission Unique Software in computing clouds or highly virtualized environments. Write Certification To Field assessment procedures and run the test cases for customer cybersecurity representatives to observe.
• Work with customer representatives on cyber test and evaluation to meet key program milestones.
• Scan, remediate and patch Windows and Red Hat systems and COTS and GOTS applications, including those in virtual or cloud environments.
• Write or update Standard Operating Procedures, and when needed apply software patches, fix other flaws, update antivirus and perform continuous monitoring.
• Make sure systems are run, maintained and retired according to security policy and the system security authorization package.

Requirements

• Experience designing systems or networks around DISA HBSS or ESS, or hands-on experience operating them.
• Experience designing systems or networks around industry platform hardening, such as DISA STIG implementation, including documenting deviations and mitigations, or hands-on experience with that hardening.
• Experience designing systems or networks around vulnerability scanning and remediation with ACAS or Tenable NESSUS, including audit reduction tools, or hands-on experience scanning, remediating, mitigating and reporting vulnerabilities with them.
• Experience implementing RMF from system categorization through continuous monitoring.
• Strong technical writing skills and the ability to communicate with audiences from technical staff to senior program managers.
• Level 3: a BS in engineering with 5 years of experience, or a Masters with 3 years of experience. Experience can replace the degree at an additional 4 years.
• Level 4: a BS in engineering with 8 years of experience, or a Masters with 6 years of experience. Experience can replace the degree at an additional 4 years.
• At least 2 years of Cyber or SSE experience, preferably in the defense aerospace industry.
• Active Top Secret clearance with SCI at the time of application.
• US citizenship.
• Preferred: a BS in Electrical Engineering or Software Engineering.
• Preferred: an MS in Electrical, Systems or Aerospace Engineering.
• Preferred: a current CISSP-ISSEP or CISSP-ISSAP.
• Preferred: 7 years of IA or cybersecurity experience, at least 3 of them within the SAP community in defense aerospace.
• Preferred: experience hardening Docker containers.

Conditions

On-site only.

Travel: about 10% of the time.

A new hire start date depends on transfer of your Top Secret clearance.

Relocation assistance may be available.

Base pay ranges: Primary level $125,300.00 to $187,900.00; Secondary level $156,400.00 to $234,600.00. These are general guidelines, and final offers depend on the scope of the role, your experience, education, skills and current market conditions.

The application period is estimated at 20 days from the posting date, and may be shortened or extended based on business needs and candidate availability.

Benefits

• Depending on the role, eligibility for overtime, shift differential and a discretionary bonus, which rewards individual contributions and shares company results.
• Vice President and Director roles may be eligible for Long Term Incentives.
• Health insurance, life and disability insurance, a savings plan, paid company holidays, and paid time off for vacation or personal business.