Senior Cyber Assessment Engineer

About the role

Battelle’s Cyber Business Unit is seeking a Senior Cyber Assessment Engineer to lead the Cybersecurity Assessments of Counter-Unmanned Aircraft Systems (C-UAS) for the Department of Homeland Security (DHS).

Responsibilities

• Provide technical program management for cyber physical assessments
• Lead and participate in Cyber assessments of Counter-Unmanned Aircraft Systems (C-UAS)
• Manage Hardware assessment, network communication analysis, Open Source Intelligence (OSINT) Research, Electromagnetic Spectrum performance analysis
• Manage the development of Cyber Assessment Reports, associated deliverables, and official correspondence
• Manage full lifecycle Cyber Assessment Process deliverables: Test Plans, Test Readiness Reviews (TRR), Cyber Assessment Reports, Cyber Assessment Policies and Procedures, vulnerability analysis, and risk management, and Plans of Action & Milestones (POA&Ms)
• Serve as trusted partner and Subject Matter Expert for Senior Federal Program Managers
• Brief Senior Federal Executive Leadership on Cyber Assessment Reports and recommended remediation
• Develop and deliver security policy white papers and briefings
• Evaluate and analyze leading edge security technologies to be implemented to improve the organization’s security posture
• Work with research and development (R&D) organizations to define requirements to design and develop leading-edge security solutions
• Collaborate with fellow Cyber Security Practice Team Members both locally and across the Cyber Security Practice in the full-lifecycle development and delivery of security technology solutions
• Actively contribute to the Battelle Cyber process improvement initiatives
• Actively participate in leading edge cyber security conferences, working groups and training
• Actively participate in Cyber Security Practice “Solving the Toughest Security Problems” expert group

Qualifications

• Must be a U.S. Citizen
• Active DoD SECRET Clearance or DHS “Enter on Duty” (EOD) or “Full Suitability Approval” (FSA) Background Investigation status
• 10+ years IT experience with at least 4+ years of that experience in information assurance and IT security
• Bachelor's Degree (BS/BA)
• Certified Information Systems Professional (CISSP)
• Motivated self-starter who requires minimal supervision and oversight
• Strong organizational, and time management skills, and the ability to meet tight deadlines
• Strong Analytical and Writing skills with history of producing quality technical documentation
• Prior proven experience working in collaborative sessions demonstrating strong verbal and written communication skills along with tactful negotiation skills
• Proven experience working in Cyber Physical Systems Assessment, Project Management, Systems and Security Engineering, Cyber Security, Requirements Elicitation, Customer Service & Delivery
• Proven knowledge of NIST 800-53 rev3 Operation, Technical, and Managerial Controls, IT, IA and physical security concepts and principles
• Expertise with Windows and Linux configuration STIG hardening, DISA Security Technical Implementation Guides (STIGs), implementation SCAP Compliance Checker (SCC) and STIG Viewer
• Expertise in Plans of Actions and Milestones (POA&M) management
• Subject Matter Expertise of the Risk Management Framework (RMF)

Preferred Qualifications

• Current DHS Security Suitability
• M.S. in Information Systems or related field
• Experience with Electromagnetic Spectrum assessment, Signal Characterization, Electronic Warfare and countermeasures
• Experience with C-UAS, Aviation, Maritime, and/or Border operations and systems
• Experience with Customs and Border Protection (CBP) to include: U.S. Border Patrol (USBP), Support to Federal, State, Local, and Tribal Authorities, Border Operations, Operational Intelligence; Intelligence, Surveillance, and Reconnaissance (ISR) systems; Processing, Exploitation, and Dissemination (PED), and law enforcement support
• Experience with IT Security Engineering in support of systems development, interface, and/or architecture requirements and concepts for C-UAS, Aviation, Maritime, and/or Border Protection solution elements
• Experience with DHS MD 4300A Security Controls and Security Authorization Process
• Expertise in evaluating system and application security threats and vulnerabilities
• Experience with Nessus, CrowdStrike, Splunk SIEM, SCAP, End Point Protection tools, and other vulnerability detection tools
• Experience with reviewing Static Application Security (SAST) Reports
• Experience with Cloud Architectural Concepts & Design Requirements
• Experience with Cloud Data Security
• Experience with Cloud Platform & Infrastructure Security
• Experience with Cloud Application Security
• Experience with Cloud Environment Operations
• Experience with Mobile Application Security
• Consulting environment experience
• Military veteran with relevant IT and computer security experience