Senior Staff Engineer, System Security (R6509)

We are seeking a Systems Security Engineer to support embedded Cybersecurity and Anti-Tamper activities for aerospace and defense platforms. The role is responsible for applying the DoD Risk Management Framework (RMF) and working with government customers to achieve Authorization to Operate (ATO) for the systems. The team member will also be involved with developing the AT artifacts and documentation for customer AT plan approval. 

Carry out the DoD RMF process and develop the evidence needed to achieve the ATO. 

Define the embedded cybersecurity architecture, requirements, models, documentation, and trade studies. 

Perform threat modeling, attack-surface analysis, vulnerability assessments, and cyber risk assessments. 

Develop the program's AT artifacts and documentation to support government approval of the AT plan. 

Plan and execute the cybersecurity implementation and verification 

Coordinate between internal teams, stakeholders, suppliers, and customers to effectively communicate and integrate the Cybersecurity solution 

Bachelor's degree in computer engineering, electrical engineering, software engineering, systems engineering, or a related STEM field, plus at least 8 years of related experience. 

Experience with the systems engineering process of developing embedded Cybersecurity solutions in aerospace and defense systems.  

Experience with threat modeling, secure system architecture, vulnerability analysis, and security testing. 

Familiarity with NIST SP 800-53 and NIST SP 800-160 volumes 1 and 2 

Strong technical leadership, writing, and customer communication skills. 

Active Secret security clearance with ability to obtain special access 

Knowledge of avionics, mission systems, platform networks, communications, or data links. 

Experience with Anti-Tamper, Critical Program Information (CPI) assessments, Key Management Plans, Supply Chain Risk Management, Software Assurance, or Cross Domain Solutions. 

Hands-on experience with penetration testing or adversarial assessments. 

CISSP certification