Cybersecurity (ISSM)

Responsibilities

• Demonstrated experience related to acquisition platform and cyber security
• Knowledge of Risk Management Frameworks (RMF), cyber security strategies, developing cyber resilient System of Systems (SoS), systems engineering, network engineering, and technical interface design
• Implement all phases of the RMF processes for weapon systems generating both unclassified and classified information
• Develop and analyze cyber security engineering artifacts used to support the Assessment and Authorization (A&A) process leading to a successful ATO decision
• Develop risk reduction-based policies and procedures and develop comprehensive cyber security processes including implementation of continuous monitoring
• Develop the Cyber Security Impact Evaluation Recommendation to assess changes on the system in support of the continuous monitoring plan
• Document system architectures using OEM documentation and system interface specifications to support cyber analysis, identification, selection, and tailoring of security and privacy controls
• Develop, modify, review, and coordinate Platform Information Technology (PIT) determination packages, cyber security strategies, system security plans, and RMF artifacts for program review
• Evaluate threat data and develop residual risk recommendations and mitigations to senior DoD and AF leadership based on identification and analysis of weapons vulnerabilities
• Research threat products and develop suitable defense measures, evaluate system changes for security implications, and recommend enhancements, research, and draft cyber security white papers
• Provide expert level evaluation of designs and proposed implementation solutions to defend weapon systems and critical networks against malicious and non-malicious exploitation throughout the full acquisition life cycle of portfolio programs
• Review and analyze interoperability requirements and review, develop, and evaluate resultant specifications and internal and external ICDs
• Review and propose technical recommendations at both the strategic and operational levels regarding critical technologies requiring protection, Program Protection Plans (PPP), and Anti-Tamper (AT) plans, cyber findings, vulnerabilities, and risks
• Review and/or document the systems Critical Program Information/Critical Technology (CPI/CT) and provide recommendations to the system’s Chief of Security and the Program Manager
• Required to have access to classified material and classified information systems to include the Secret Internet Protocol Router Network (SIPRNet) and the Joint Worldwide Intelligence Communications System (JWICS)

Qualifications

• Master’s or Doctorate Degree in a related field and ten years of experience in the respective technical / professional discipline being performed, five years of which must be in the DoD.
• OR bachelor’s degree in a related field and 12 years of experience in the respective technical/professional discipline being performed, five of which must be in the DoD.
• OR, 15 years of directly related experience with proper certifications as described in the PWS labor category performance requirements, eight of which must be in the DoD.
• Certifications: CISSP