Sentinel - Systems/Principal Systems Engineer (SCRM Vulnerability Assessment) - 17987

Description

The team in Roy, Utah, within the company's defense systems business, is hiring a Systems Engineer for SCRM vulnerability assessment on a defense program.

You will test and document the cybersecurity posture of commercial off-the-shelf hardware and software products.

Responsibilities

• Run vulnerability assessments on COTS hardware and software.
• Review and interpret assessment results, then explain them to others.
• Take part in working groups and customer meetings.
• Improve assessment methods, processes, infrastructure, tools and deliverables over time.

Requirements

• This requisition may be filled at the Systems Engineer level (T-02) or the Principal Systems Engineer level (T-03).
• At both levels you must be a US citizen with an active U.S. Government Secret clearance when you apply, current and within scope, with an investigation dated within the last 6 years.
• At both levels you must hold current approval for a Special Access Program (SAP), or be able to obtain and keep one within a period the company considers reasonable for its business needs.
• Level 2 (SCRM Vulnerability Assessment Engineer): a BS in Software Engineering, Computer Science, Digital Forensics, Computer Engineering or Electrical Engineering, or an equivalent discipline, with 2 years of related experience; or a Master's in one of those disciplines with 0 years of related experience.
• Level 3 (SCRM Vulnerability Assessment Principal Engineer): a BS in one of those disciplines, or an equivalent, with 5 years of experience; or a Master's in one of them with 3 years; or a PhD with 1 year.
• At both levels you must be able to earn CompTIA Security+ within 6 months of starting.
• At both levels you need experience developing, documenting and carrying out formal test plans and procedures, focused on vulnerability and penetration testing and on counterfeit part assurance.
• Preferred: a Top Secret security clearance.
• Preferred: OSCP, GREM, PenTest+ or a comparable industry-recognized certification, any one of them.
• Preferred: experience with penetration testing and vulnerability assessment tools such as Kali Linux, Metasploit, NESSUS, ACAS, OpenVAS or similar.
• Preferred: experience validating software configurations against STIG and OpenSCAP.
• Preferred: experience with software forensics work and processes.
• Preferred: experience with SCRM chain of custody processes and procedures.
• Preferred: experience with software or hardware reverse engineering and exploratory reconnaissance.

Conditions

The role is based in Roy, Utah, and travel is about 10% of the time.

Relocation assistance may be available.

A Secret clearance is required to start.

The standard schedule is 9/80: nine-hour days Monday through Thursday, with every other Friday off.

Base pay is $79,300.00 to $118,900.00 at the Primary level and $98,400.00 to $147,600.00 at the Secondary level.

These ranges are a general guide. The company sets base pay based on the scope of the role, your experience, education, skills and current market conditions.

The application period is estimated at 20 days from the posting date, and may be shortened or extended depending on business needs and candidate availability.

Benefits

• Full-time employees receive medical, dental and vision coverage, life and disability insurance, and a savings plan.
• Retirement savings through a 401k, plus educational assistance.
• Paid time off, company-paid holidays, health and wellness resources, employee assistance programs, work/life solutions and employee discounts.
• Depending on the position, overtime, shift differential and a discretionary annual bonus may be paid on top of base pay, with bonuses rewarding individual contributions and company results.
• Vice President and Director roles may be eligible for Long Term Incentives.