Cyber Engineer Principal

SAIC•Washington, DC

About The Position

This position requires familiarity with the FAA Lifecycle Management Process as well as NIST Risk Management Framework and Air Traffic Organization (ATO) processes for information system approvals. Expected duties to include but not limited to Completion of annual Information Security Continuous Monitoring (ISCM) security deliverables. Security requirements are appropriately incorporated throughout the FAA Lifecycle: from Concept and Requirements Definition, to Solution Implementation, to In-Service Management. System compliance with security and privacy regulations including Zero-Trust Model, Federal Information Security Modernization Act (FISMA) requirements, and FAA Orders. Participation in security requirement testing and validation. Risk management decisions align and minimize security impacts on FAA and NAS Mission. Strong technical writing skills for review, critique and briefing of dashboards and reports to customer. Writes and updates material for reports, briefs, proposals, and related technical and administrative publications concerned with work methods and procedures. Refines work of writers, and heads and coordinates activities of writers engaged in preparing technical, scientific, medical, or other material for publication in conjunction with or independent from research, and related activities. Additional security responsibilities: Data calls for commercial vulnerabilities, Bulletins, Advisories, and Alerts, Plan of Action and Milestones (POA&M maintenance), Continuous operational security support, Weekly Dashboard and Reports.

Requirements

Familiarity with the FAA Lifecycle Management Process
Familiarity with NIST Risk Management Framework
Familiarity with Air Traffic Organization (ATO) processes for information system approvals

Responsibilities

Completion of annual Information Security Continuous Monitoring (ISCM) security deliverables
Ensure security requirements are appropriately incorporated throughout the FAA Lifecycle: from Concept and Requirements Definition, to Solution Implementation, to In-Service Management
Ensure system compliance with security and privacy regulations including Zero-Trust Model, Federal Information Security Modernization Act (FISMA) requirements, and FAA Orders
Participation in security requirement testing and validation
Ensure risk management decisions align and minimize security impacts on FAA and NAS Mission
Strong technical writing skills for review, critique and briefing of dashboards and reports to customer
Writes and updates material for reports, briefs, proposals, and related technical and administrative publications concerned with work methods and procedures
Refines work of writers, and heads and coordinates activities of writers engaged in preparing technical, scientific, medical, or other material for publication in conjunction with or independent from research, and related activities
Data calls for commercial vulnerabilities
Bulletins, Advisories, and Alerts
Plan of Action and Milestones (POA&M maintenance)
Continuous operational security support
Weekly Dashboard and Reports