Engineering Subject Matter Specialist - SSE Cyber

Overview of position:

FEDITC is seeking Engineering Subject Matter Specialist (SSE Cyber) to work in Warren MI area.

Systems security engineering is a specialty engineering discipline of systems engineering that applies scientific, mathematical, engineering, and measurement principles, concepts, and methods to coordinate, orchestrate, and direct the activities of various security engineering specialties and other contributing engineering specialties to provide a fully integrated, system-level perspective of system security. Systems security engineering, as an integral part of systems engineering, helps to ensure that the appropriate security principles, concepts, methods, and practices are applied during the system life cycle to achieve stakeholder objectives for the protection of assets—across all forms of adversity characterized as disruptions, hazards, and threats. It also helps to reduce system defects that can lead to security vulnerability and as a result, reduces the susceptibility of the system to adversity. And finally, systems security engineering provides a sufficient base of evidence that supports claims that the desired level of trustworthiness has been achieved—that is, a level of trustworthiness that the agreed-upon asset protection needs of stakeholders can be adequately satisfied on a continuous basis despite such adversity.

A United States Citizenship and an active Secret DoD Security Clearance is required to be considered for this position.

VS2C staff designated as System Security Engineers (SSE) will be responsible for ensuring the development and delivery of capability through the implementation of an approach based on cost, schedule, performance, and risk. This will be accomplished using integrated and consistent systems engineering (SE) activities and processes, regardless of the acquisition life cycle phase of the program. The SSE will assist in conducting trade-off analyses and will integrate contributions from system security engineering disciplines such as anti-tamper, cybersecurity, exportability features, hardware assurance, software assurance, supply chain risk management; and security specialties (personnel security, industrial security, physical security, etc.). The SSE will also focus on Cyber survivability, to assess the ability of the system to perform its mission and functions, in the face of cyber-attack, by the anticipated adversaries, and to operate effectively in a cyber-contested environment. The outcome of the SSE’s efforts will be a comprehensive program and system protection strategy within the constraints of cost, schedule, and performance while maintaining an acceptable level of risk. To integrate all aspects of system security, the SSE will lead the evaluation and balancing of security contributions to produce a coherent security capability across the system and the program. 

Responsibilities

• Defining stakeholder security objectives, protection needs, concerns, and system security requirements, along with associated validation and verification methods.
• Developing security perspectives within system architecture and design, including security views and viewpoints.
• Identifying and assessing vulnerabilities, threats, hazards, and susceptibility to disruptions throughout the system lifecycle.
• Conducting security assessments and risk analysis to identify potential security threats.
• Designing, developing, and implementing proactive and reactive security solutions to mitigate risks and protect systems and data.
• Monitoring security systems for anomalies and responding to security incidents in a timely manner.
• Providing security considerations to inform systems engineering, aiming to reduce errors, flaws, and weaknesses that could lead to unacceptable asset loss or security vulnerabilities.
• Evaluating the costs and benefits of security functions and considerations to support analysis of alternatives, engineering trade-offs, and risk treatment decisions.
• Performing security system analyses to support decision-making, risk management, and engineering trade-offs.
• Demonstrating, through evidence-based reasoning, that system security claims are satisfied and providing substantiating evidence for system trustworthiness.
• Leveraging expertise from multiple security and related specialties to deliver a trustworthy and secure system.
• Ensuring the effectiveness and suitability of security elements as enablers for mission and business success.
• Incorporating relevant threat and vulnerability data into security-relevant decisions.
• Conducting security risk management activities, producing related information, and advising engineering teams and stakeholders on the impact of threats and vulnerabilities.
• Collaborating with technical teams to integrate security measures into system design and development processes.
• Identifying critical system components and providing well-organized analysis of systems and potential risks.
• Supporting Program Protection Planning (PPP), aligned with the SSE Framework and DoD Technology and Program Protection Guidebook.
• Applying multidisciplinary engineering expertise to address programmatic system security requirements, including protection needs assessment, secure architecture, security technologies, hardware/software assurance, cybersecurity testing/evaluation, and program protection plan development.
• Advising on system description, functions, information types, operating environments, and security and privacy requirements.
• Reviewing the adequacy of controls to protect the system and its information, manage privacy risks, and ensure compliance with privacy requirements.
• Assisting in tailoring security and privacy controls as necessary.
• Ensuring confidentiality, integrity, and availability by designing and implementing secure systems.
• Ensuring system compliance with privacy requirements and managing privacy risks associated with processing personally identifiable information (PII).
• Implementing secure and privacy-enhancing networking and computing environments.
• Providing security and privacy planning to support system operations.
• Implementing requirements for proper handling of data within the system.
• Recommending system-level solutions to address security and privacy requirements.
• Coordinating effective implementation of common controls across organizational systems.
• Staying current on the latest security trends, technologies, and best practices to continuously improve system security.

Experience/Skills:

• Two or more years of proven experience in system security engineering or a related role
• Strong knowledge of security principles, practices, and technologies
• Experience with security assessment tools and techniques
• Excellent problem-solving and analytical skills
• DoD/Military Training: (CLE 074 + CYB 5640/CYB 5640V/WSS 010 + WSS 011 + WSS 012 + CYB 5610 + CYB 5620V) or 4C-F22/160-F23, 4C-FA26

Education: 

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or Information Technology (from an ABET accredited or NCAE-C-designated institution

Acceptable Certifications:

• CND, GISF, SSCP, Security X/ CSAP+, CCSP, Cloud +, CSC, GCLD, GSEC, CISSP-ISSEP, FITSP-D, GCSA

Clearance:

• Active Secret clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).