Cybersecurity Senior Systems Engineer
Core
Lead cybersecurity architecture and security overlay decisions for mission-critical technologies and supply-chain considerations within the system life cycle.
Role type
Senior IC cybersecurity systems engineer
Builds
Security requirements, automation templates, RMF packages, and security-focused test events
Domain
Defense / Information Assurance / RMF
Required skills
Cybersecurity architecture, RMF implementation, vulnerability assessment, risk assessment, security configuration management, DevSecOps pipeline support, STIG hardening, security requirements development, technical documentation, security strategy formulation, classified-information handling
Preferred skills
DoD acquisition process knowledge, PAE MS, NAVWAR, military ISR systems experience, NIST compliance standards, US Navy C4I systems knowledge, Linux/Windows administration, network protocols, scripting, firewall management
Technologies
Linux, Windows, network protocols, web services, databases, scripting, firewalls
Responsibilities
Lead or influence cybersecurity architecture and security overlay decisions; Integrate Program Protection measures for critical program information and mission-critical technologies; Coordinate with systems engineering, program management, cybersecurity, intelligence, authorization, and operational stakeholders; Support software security in the DevSecOps pipeline including dashboard construction, scan automation, security posture reviews, and security configuration management; Tune IA scanning tools and automation for ATO needs and controls; Develop security requirements, automation templates, best practices, technical documentation, and cybersecurity strategies; Perform vulnerability, risk, criticality, critical functionality, and critical component analyses supporting RMF and Assessment and Authorization; Develop and maintain RMF package components, risk assessments, test plans, and cybersecurity-focused test events such as CVPA and adversarial assessments; Draft Program Protection Plans, Security Classification Guides, Anti-Tamper Plans, and other Navy acquisition security documents; Review systems, networks, software designs, and security solutions for risks, mitigations, integration issues, and classified-information handling requirements; Provide technical analysis and recommendations for Battlespace Awareness infrastructure, information-access capabilities, and software tools
