Standard Job Description

Responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle. Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. Coordinates and addresses Supply Chain risk management concerns. Develop, evaluate and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain. Coordinate with Cyber and system architects and developers to provide oversight in the development of solutions. Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements. Employs cyber security processes, methods, techniques and tools and assure their consistent application. Implements appropriate Assessment and Authorization activities as required by customers. *USE OF THIS CLASSIFICATION REQUIRES AUTHORIZATION FROM THE BUSINESS AREA CYBER DIRECTOR OR DELEGATE*

Basic Qualifications

• Validation of System Security Engineering cyber requirements decomposition, allocation and analysis.

• Experience analyzing product design for weaknesses, vulnerabilities and threats against a system’s security posture and providing solutions

• Experience utilizing NIST 800-53 Rev. 5, Committee on National Security Systems Instruction (CNSSI) 1253, and NIST SP 800-37 Risk Management Framework (RMF) to design and harden information systems.

• Conduct cyber risk analyses and security assessments, and evaluate applicability of Security Technical Implementation Guides (STIGs) to mitigate vulnerabilities and address compliance

• Develop artifacts to support Interim Authorizations to Test (IATT), and Authorizations to Operate (ATO)

• Experience assessing and mitigating system security risk throughout the System development life cycle.

• Utilization of cyber tools for enterprise security, vulnerability scanning and network monitoring

• Strong communication skills and ability to collaborate with cross-functional teams to integrate security considerations into platform development.

• Strong background in operating systems, including Windows Server and Linux distributions (RHEL)

• Strong technical understanding of system architecture, design, and security principles.

• Solid understanding of networking fundamentals: routing and switching protocols and architectures

• Hands‑on expertise with virtualization technologies.

• DoD 8140 Level II or higher certificate or such as CompTIA Security+ CE, CySA, CASP, GSEC, CISSP.

• Ability to travel as required (typically up to 20%)

Desired Skills

• Capable of completing any additional enhanced security reviews required by government contracts

• Bachelor’s degree in a STEM discipline or related field, or equivalent cyber engineering experience. *

• Experience supporting DoD programs with CDS needs.

• Design, implement, deploy, and maintain state-of-the-art system security architectures and countermeasures to protect and enable innovative new products.

• Capable of completing any additional enhanced security reviews required by government contracts

• Experience conducting or participating in penetration tests and cyber table tops exercises

• Evaluation of TTPs resulting in attack path analysis reports

• Experience with software code analyzers, review and analysis of risk reports based on threats and vulnerabilities

• Software programming background and scripting skills to automate tasks (e.g. Ansible, Python, Bash, Perl, Batch, VBScript, PowerShell, etc.).

• Experience in vulnerability remediation and security management, including system hardening, log management, and configuration control using tools like Nessus, McAfee, WSUS, Shavlik, Blade Logic, Splunk, ACAS, SCAP, and HBSS.

• Familiarity with embedded systems such as ASIC or FPGA based computing.

• Familiarity with storage solutions and servers.