Engineering Subject Matter Specialist (SSE Cyber)

Responsibilities

• Defining stakeholder security objectives, protection needs, concerns, and system security requirements, along with associated validation and verification methods.
• Developing security perspectives within system architecture and design, including security views and viewpoints.
• Identifying and assessing vulnerabilities, threats, hazards, and susceptibility to disruptions throughout the system lifecycle.
• Conducting security assessments and risk analysis to identify potential security threats.
• Designing, developing, and implementing proactive and reactive security solutions to mitigate risks and protect systems and data.
• Monitoring security systems for anomalies and responding to security incidents in a timely manner.
• Providing security considerations to inform systems engineering, aiming to reduce errors, flaws, and weaknesses that could lead to unacceptable asset loss or security vulnerabilities.
• Evaluating the costs and benefits of security functions and considerations to support analysis of alternatives, engineering trade-offs, and risk treatment decisions.
• Performing security system analyses to support decision-making, risk management, and engineering trade-offs.
• Demonstrating, through evidence-based reasoning, that system security claims are satisfied and providing substantiating evidence for system trustworthiness.
• Leveraging expertise from multiple security and related specialties to deliver a trustworthy and secure system.
• Ensuring the effectiveness and suitability of security elements as enablers for mission and business success.
• Incorporating relevant threat and vulnerability data into security-relevant decisions.
• Collaborating with technical teams to integrate security measures into system design and development processes.
• Identifying critical system components and providing well-organized analysis of systems and potential risks.
• Supporting Program Protection Planning (PPP), aligned with the SSE Framework and DoD Technology and Program Protection Guidebook.
• Applying multidisciplinary engineering expertise to address programmatic system security requirements, including protection needs assessment, secure architecture, security technologies, hardware/software assurance, cybersecurity testing/evaluation, and program protection plan development.
• Advising on system description, functions, information types, operating environments, and security and privacy requirements.
• Reviewing the adequacy of controls to protect the system and its information, manage privacy risks, and ensure compliance with privacy requirements.
• Assisting in tailoring security and privacy controls as necessary.
• Ensuring confidentiality, integrity, and availability by designing and implementing secure systems.
• Ensuring system compliance with privacy requirements and managing privacy risks associated with processing personally identifiable information (PII).
• Implementing secure and privacy-enhancing networking and computing environments.
• Providing security and privacy planning to support system operations.
• Implementing requirements for proper handling of data within the system.
• Recommending system-level solutions to address security and privacy requirements.
• Coordinating effective implementation of common controls across organizational systems.
• Staying current on the latest security trends, technologies, and best practices to continuously improve system security.

Qualifications

• Two or more years of proven experience in system security engineering or a related role.
• Strong knowledge of security principles, practices, and technologies.
• Experience with security assessment tools and techniques.
• Excellent problem-solving and analytical skills.
• DoD/Military Training: (CLE 074 + CYB 5640/CYB 5640V/WSS 010 + WSS 011 + WSS 012 + CYB 5610 + CYB 5620V) or 4C-F22/160-F23, 4C-FA26.
• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or Information Technology (from an ABET accredited or NCAE-C-designated institution).
• Acceptable Certifications: CND, GISF, SSCP, Security X/ CSAP+, CCSP, Cloud +, CSC, GCLD, GSEC, CISSP-ISSEP, FITSP-D, GCSAC.
• Clearance: Active Secret clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).