Senior Cyber Security Engineer - Border Protection Programs

Job Summary:

Under the direct supervision and mentorship of members of the Cyber Security Engineering Staff, the Senior IT System Engineer undertakes a variety of activities and assigned projects at varying levels of professional complexity requiring knowledge within an area of specialty and/or engineering degree. The Senior IT System Engineer works as a member of the Engineering team in support of contracted tasks focusing on the integration of cybersecurity requirements into the full system lifecycle of Twenty-Six Defense's products. The candidate should have experience in developing Risk Management Framework (RMF) artifacts and shall understand system categorization and deduce NIST, DoD, CNSSI, and NSTSSM regulations into product cybersecurity requirements. The candidate shall gain experience with NIST 800-53 and CNSSI 1253 security controls, security hardening of products, deriving and managing security requirements, risk management, technical planning, threat and vulnerability assessments, systems-level design, systems integration, verification, and validation including security testing and evaluation, and supportability and effectiveness analyses for the total systems.  This candidate will interact directly with multidiscipline professionals in the planning and implementation of assigned projects. 

Responsibilities and Tasks: 

You will get to provide individual technical contribution and cyber security engineering leadership in the development of advanced systems for the US DoD, including providing system concept definition, cyber security requirements development and analysis, new technology assessments, evaluation of alternative technical solutions, and hands-on cyber security tasks. You will also support engineering project teams in the pursuit of new business, including the definition of advanced design concepts to address customer needs, the preparation of engineering inputs, cost estimates, and schedules for proposals. Your analytical skills and your ability to plan and lead cyber security engineering activities will be challenged daily.  You’ll be working a lot with others including interfacing with internal and external project teams, company personnel (Engineering, Operations, Program Management, Business Development), and the customer community.

Perform various duties related to the day-to-day operations of the Cyber Security Engineering team, including:

Be a part of a program cybersecurity risk mitigation effort using the Risk Management Framework (RMF)

Evaluate new and existing systems and architects the software, firmware, and hardware requirements from an IT system engineering perspective

Participate in development efforts to ensure cybersecurity controls are integrated to meet platform security posture and the Department of Defense (DoD) Authorizing Officials program requirements such as Authority to Connect (ATC), Authority to Operate (ATO), and Authority to Test (ATT).

Participate in the formal Security Test and Evaluation process required by each government acceptance and approval authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports

Perform product security reviews with the ability to communicate issues and risks in business terms and make recommendations that balance risk/reward tradeoffs

Recommend cybersecurity defense and countermeasures for avionics product designs

Research, evaluate, and assess emerging cyber security threats and technologies

Evaluate and test new cybersecurity tools and capabilities such as but not limited to vulnerability management, Security Information and Event Management (SIEM), Network Management Systems (NMS), Incident Responses, Disaster Recovery, and Security Operations.

You may also conduct research and prepare reports based on findings, to include recommendations or alternative proposals for action.

Provides general guidance or training to lower-level staff. Assists in cost/scope estimation. May lead small tasks.

Provides solutions to a variety of technical problems of moderate scope and complexity as part of a project team.

Provides technical solutions to a wide range of difficult problems. Solutions are creative, thorough, and practical.

Install and Maintain Hardware, Storage and Integration for Computer Systems

Design the hardware, storage needs, integration requirements, etc. to meet the needs of the program. This may also include configuring components and troubleshooting any issues during and after implementation.

Responsible for design, development and implementation of IT Infrastructure for engineering programs. Participate in overall IT planning, bringing a current knowledge and future vision of technology and systems to meet customer needs.

You will be expected to continually monitor systems and make necessary adjustments and minor repairs to keep these systems operating smoothly. You may also perform scheduled maintenance on systems to avoid any down time due to system issues. Included in the IT System Engineer’s responsibilities are diagnosing production problems and providing technical, strategic and procedural support to their organizations.

Education, Experience/Knowledge & License/Certification:

Hold an accredited Bachelor in Cybersecurity, Computer Science, Software Engineering, or other related engineering degrees with a cumulative GPA of over 3.2 and with a minimum of 5 years of experience in cyber security; or

Hold an accredited Master in Cybersecurity, Computer Science, Software Engineering, or other related engineering degrees with a cumulative GPA of over 3.2 and with a minimum of 3 years of experience in cyber security; or

Hold an accredited Ph.D. in Cybersecurity, Computer Science, Software Engineering, or other related engineering degrees with a cumulative GPA of over 3.2.

Skills and Abilities

You have experience with the Risk Management Framework (RMF), knowledge of system security architectures and engineering approaches to building system security solutions, experience with Department of Defense, Government Certification and Authorizing Officials, or federal customer base.

You understand security vulnerabilities found via security tools (i.e., Nessus/Tenable, NMAP, Infrastructure devices, and others).  Have a strong understanding of system and infrastructure security.

Requires excellent written and oral communication skills, the ability to understand and follow complex, detailed instructions, and the ability to work both independently and in a team environment.   Must be able to approach technical problems logically and scientifically. Must be flexible and able to handle multiple priorities and be able to work for short to moderate periods without direct supervision.

Proficient in Linux and Windows operating systems, Windows Active Directory, VMWare and VCenter (ESXI), and Windows workstations.

Should be familiar with Milestone digital video recorders.

Working knowledge administering Microsoft SQL Servers.

Any of the IA certifications identified in DoD 8570 Approved Baseline Certifications.

Travel/Physical Requirements

Able to travel domestically and internationally up to 20% to support projects.

Must be able to acquire a Secret Security clearance.

#LI-TS1