Vacancy expired!
- Provide Information Security System Engineering support to spacecraft design and mission operations CONOPs development
- Provide Information Security System Engineering support to Systems Engineering activities for requirements definition, trade study execution, and design review participation in support of cyber protection functions for satellite systems
- Provide Information Systems Security Engineering support and technical execution of information security activities associated with the Assessment and Authorization (A&A) of NIST Risk Management Framework (RMF) hardened space vehicles and associated ground systems
- Support Security Engineering activities, including design, testing, configuration, management and maintenance of spacecraft and ground support system technical baselines
- Ensure RMF Information Security requirements and Program Protection requirements are addressed in all phases of the System Development Lifecycle (SDLC)
- Experience in writing and managing RMF body of evidence documents (e.g., System Security Plan (SSP), Security Compliance Traceability Matrix (SCTM), Risk Assessment Report (RAR), Continuous Monitoring (ConMon) Plan, and Security Assessment Plans and Procedures (SAPP))
- Experience with ICD-503 Accreditation Process
- Strong understanding of engineering processes, concepts and information security systems engineering principles (NIST SP 800-160 Vol1) and familiarity with NIST 800-171
- Perform functional analysis, timeline analysis, detailed trade studies, requirements derivation and allocation, and interface definition studies to translate customer Information Security requirements into hardware and software specifications
- Responsible for developing security overlays, data flow diagrams, internal requirements, CONOPs and interface control documents from customer / product requirement
- Provide Information Assurance technical leadership to development teams at internal and external gate reviews such as technical baseline reviews and design reviews.
- Work closely with Program Managers, Systems Engineering and other engineering discipline
- Brief senior management on all aspects of Security Engineering
- Identify security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives (hardware, software, cryptographic devices, firewalls, intrusion detection systems, anti-virus systems and software deployment tools)
- Conduct complex security architecture analysis to evaluate and mitigate risks
- Self-motivated and able to work well independently and within inter-disciplinary engineering teams
- Able to explain technical security needs to non-security team members in manner that facilitates cross-functional design activities
- Bachelor's Degree and minimum 9 years of prior relevant experience, or
- Graduate Degree and a minimum of 7 years of prior related experience.
- DoD 8570.01-M IASAE Level 2 certification.
- Active Top Secret clearance
- Direct experience with the design, development, and operations of satellite systems
- Familiarity with cryptographic systems used to protect space/ground communications
- Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SC
- Moderate understanding of vulnerability analysis tools such as Tenable NESSUS Security products
- DoD 8570.01-M IASAE Level 3 certification
- Experience writing Basis of Estimate documents
- Experience supporting Business Development activities
- Experience in the content development and administration of SIEM/audit reduction tools (e.g., Splunk)
- Foundational knowledge of Layer 3 architecture and diagramming within Visio (or equivalent)
- Basic understanding of routing and switching as employed in telecommunications and network traffic
- General knowledge of common threats to information systems and how compromise would damage system integrity
- System testing and evaluation methods and RMF assessment methodology & process
- Experience with Model Based System Engineering (UML, SysML, DoDAF)
- Experience with application of STIGs
- Experience with DOORS requirement management software
- Active TS/SCI with a CI Poly is highly desired
- Ability to travel up to 10%
Vacancy expired!