Engineering Subject Matter Specialist (SSE Cyber)

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission-critical national security systems directly supporting the Warfighter, DoD Leadership, and the country.

About the role

FEDITC is seeking an Engineering Subject Matter Specialist (SSE Cyber) to work in the Warren, MI area. Systems security engineering is a specialty discipline of systems engineering that applies scientific, mathematical, engineering, and measurement principles to coordinate and direct security engineering activities, providing a fully integrated, system-level perspective of system security.

Systems security engineering ensures appropriate security principles, concepts, methods, and practices are applied during the system life cycle to achieve stakeholder objectives for the protection of assets—across all forms of adversity characterized as disruptions, hazards, and threats. It reduces system defects that can lead to security vulnerabilities, thereby decreasing the system's susceptibility to adversity. Additionally, it provides a sufficient base of evidence supporting claims that the desired level of trustworthiness has been achieved.

A United States Citizenship and an active Secret DoD Security Clearance are required for this position.

Responsibilities

• Define stakeholder security objectives, protection needs, concerns, and system security requirements, along with associated validation and verification methods.
• Develop security perspectives within system architecture and design, including security views and viewpoints.
• Identify and assess vulnerabilities, threats, hazards, and susceptibility to disruptions throughout the system lifecycle.
• Conduct security assessments and risk analysis to identify potential security threats.
• Design, develop, and implement proactive and reactive security solutions to mitigate risks and protect systems and data.
• Monitor security systems for anomalies and respond to security incidents in a timely manner.
• Provide security considerations to inform systems engineering, aiming to reduce errors, flaws, and weaknesses that could lead to unacceptable asset loss or security vulnerabilities.
• Evaluate the costs and benefits of security functions and considerations to support analysis of alternatives, engineering trade-offs, and risk treatment decisions.
• Perform security system analyses to support decision-making, risk management, and engineering trade-offs.
• Demonstrate, through evidence-based reasoning, that system security claims are satisfied and provide substantiating evidence for system trustworthiness.
• Leverage expertise from multiple security and related specialties to deliver a trustworthy and secure system.
• Ensure the effectiveness and suitability of security elements as enablers for mission and business success.
• Incorporate relevant threat and vulnerability data into security-relevant decisions.
• Conduct security risk management activities, produce related information, and advise engineering teams and stakeholders on the impact of threats and vulnerabilities.
• Collaborate with technical teams to integrate security measures into system design and development processes.
• Identify critical system components and provide well-organized analysis of systems and potential risks.
• Support Program Protection Planning (PPP), aligned with the SSE Framework and DoD Technology and Program Protection Guidebook.
• Apply multidisciplinary engineering expertise to address programmatic system security requirements, including protection needs assessment, secure architecture, security technologies, hardware/software assurance, cybersecurity testing/evaluation, and program protection plan development.
• Advise on system description, functions, information types, operating environments, and security and privacy requirements.
• Review the adequacy of controls to protect the system and its information, manage privacy risks, and ensure compliance with privacy requirements.
• Assist in tailoring security and privacy controls as necessary.
• Ensure confidentiality, integrity, and availability by designing and implementing secure systems.
• Ensure system compliance with privacy requirements and manage privacy risks associated with processing personally identifiable information (PII).
• Implement secure and privacy-enhancing networking and computing environments.
• Provide security and privacy planning to support system operations.
• Implement requirements for proper handling of data within the system.
• Recommend system-level solutions to address security and privacy requirements.
• Coordinate effective implementation of common controls across organizational systems.
• Stay current on the latest security trends, technologies, and best practices to continuously improve system security.

Requirements

• Two or more years of proven experience in system security engineering or a related role.
• Strong knowledge of security principles, practices, and technologies.
• Experience with security assessment tools and techniques.
• Excellent problem-solving and analytical skills.
• DoD/Military Training: (CLE 074 + CYB 5640/CYB 5640V/WSS 010 + WSS 011 + WSS 012 + CYB 5610 + CYB 5620V) or 4C-F22/160-F23, 4C-FA26.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or Information Technology (from an ABET accredited or NCAE-C-designated institution).
• Active Secret clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’s Client(s)/Customer(s)/Prime contractor(s).

Qualifications

• CND, GISF, SSCP, Security+, CSAP+, CCSP, Cloud+, CSC, GCLD, GSEC, CISSP-ISSEP, FITSP-D, GCSA (Acceptable Certifications).