Cyber Systems Security Engineering Sr Stf - E5

Standard Job Description 
 Responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle. Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. Coordinates and addresses Supply Chain risk management concerns. Develop, evaluate and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain. Coordinate with Cyber and system architects and developers to provide oversight in the development of solutions. Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements. Employs cyber security processes, methods, techniques and tools and assure their consistent application. Implements appropriate Assessment and Authorization activities as required by customers. *USE OF THIS CLASSIFICATION REQUIRES AUTHORIZATION FROM THE BUSINESS AREA CYBER DIRECTOR OR DELEGATE* Basic Qualifications 
 DoD 8140 IAT Level Il or higher certificate such as CompTIA Security+ CE, CySA+, CASP+, GSEC, CISSP. Extensive experience implementing and validating compliance with IA/Cybersecurity policies. Extensive experience implementing and validating security controls at the system/subsystem and component level. Extensive experience crafting cybersecurity policy, process and procedure in support of customer requirements. Deep experience with both internal and customer witnessed cyber security assessments on complex information systems.  B.S. degree in a technical discipline such as Cyber Security, Computer Science, Computer Engineering, Computer Security, or Information Technology — or equivalent applied experience Ability to travel as required (up to 10% - 20%) Desired Skills 
 • Deep experience with operating systems for embedded real-time environments typically used in avionics and aircraft systems (not Mobile or IoT) • Deep experience with securely configuring and hardening Linux and Windows based operating systems. • Experience with gaining Cross Domain Solution (CDS) accreditation and deploying approved CDSs as embedded systems.  • Extensive experience creating and updating JSIG based Body of Evidence (BoE) packages including SSPs, SCTMs, POA&Ms, etc to achieve and maintain system authorizations (ATOs, IATTs, etc.). • Deep experience conducting JSIG/RMF based continuous monitoring (CONMON), system analysis and auditing, and vulnerability assessments using cyber security tools such as Splunk, Solarwinds, Tenable Nessus/ACAS, Trellix ePO, etc.  • Demonstrated experience in multi-disciplinary environments, partnering with software, air vehicle, mission systems, ground systems and integration/test to secure complex systems throughout the life-cycle.  • Deep experience with implementation and deployment of DoD requirements, policies and processes as part of the Risk Management Framework (RMF) Assessment and Authorization (A&A) process. • Demonstrated experience with one or more of the following standards/guides: RMF, JSIG, CNSSI-1253, Common Criteria, NSTISSIP 11, DoD8500.1, DoD8500.2, JAFAN 6/3, DITSCAP, DIACAP. • Demonstrated experience implementing zero trust, machine to machine authentication and key management solutions to secure complex systems.      • Strong experience with secure software design, analysis, architecture and containerization including the application of Development, Security, and Operations (DevSecOps) principles to software development pipelines.  • Experience with one or more Mission-Based Cyber Risk Assessment (MBCRA) methodologies such as MRAP-C or similar.  • Experience creating, updating and implementing cyber security scripts with Python, JavaScript, Bash/Shell, Powershell or similar scripting language.  • Strong analytical and organizational skills with excellent