Sr Cyber Systems Engineer

Please review the job details below.

• Perform end to end space and ground system security assessments, control implementation. mitigation plans to include concept of operations, system architecture and design, software and hardware designs, development environments, I&T environments, and operational environments.
• Develop system security implementation plans, and means of meeting security reporting requirements
• Assure/enable compliance with DOD, NASA, and industry security requirements (e.g., NIST 800-53/800-171) as required by contract.
• Lead cross-functional team(s) to perform system level risk-based threat analyses, identify appropriate control and mitigation strategies, derive and allocate security requirements to system hardware and software elements.
• Actively participate in design reviews, technical interchange meetings, and working groups to ensure compliance with security and control strategies. Support trade studies as required to meet system security requirements.
• Develop security test plans to verify security requirements and validate security control implementation.
• Support Authorization to Operate (ATO) process through generation of necessary reporting and accreditation documents (e.g., POAM's)
• Lead/Facilitate internal and Customer Security Reviews to present security requirements, system assessment, control implementation and mitigation methods.
• Actively collaborate with Government Customers, and Contractors to ensure successful system ATO accreditation.

• Must be a U.S. citizen
• Bachelor's degree in systems, computer science or cyber security.
• Minimum of 5 years of relevant work experience in Information Systems Security Engineering

• DOD 8570 IAT or IAM Level 3 compliant professional certification (i.e. CISSP or Associate, CASP CE, CCNP Security, CISA, GCED, GCIH, CISM, or GSLC).
• Experience with security assessment and authorization activities required for Federal systems (e.g., RMF, CMMC, ICD-503, DIACAP) as well as security development activities for Type I and Type II encryption devices
• Familiarity with FedRAMP and FIPS 140 testing methodologies
• Proficiency in the use of cyber related tools (such as Nessus, NMAP or Splunk), network scanning, vulnerability scanning, and other penetration testing tools.
• Active Top Secret DOD clearance.
• Significant experience with NIST risk analysis processes and mitigation methods.