Cybersecurity Engineer

JPI•Washington, DC

6d•Hybrid

About The Position

JPI is seeking an experienced System Security Engineer / Cybersecurity Engineer to support the U.S. Coast Guard (USCG) on site 3 days a week in integrating Cybersecurity and Program Protection activities into Coast Guard acquisition policies, programs, and systems. This role is embedded within the USCG acquisition enterprise and works directly with government stakeholders to ensure that cybersecurity and program protection principles are built into acquisition programs from inception through sustainment. This is a high impact position for a senior professional with deep expertise in acquisition cybersecurity, system security engineering, and program protection and a track record of delivering results in complex federal environments. This is a 1099 position! At JPI, we strive to empower our people and excel for our clients. We hold ourselves to high standards and prioritize our values of being one team with unwavering integrity. We are motivated by our mission and driven to deliver solutions that exceed expectations. Will you join us?

Requirements

Bachelor’s Degree in Information Technology, Cybersecurity, Systems Engineering, Computer Science, or a related field
8+ years of Information Technology (IT)-related experience, including 3+ years in a management or supervisory capacity and 3+ years of direct experience in cybersecurity, program protection, or acquisition security
Demonstrated experience supporting DoD or DHS programs, including integration of cybersecurity and program protection into the acquisition lifecycle
Working knowledge of Program Protection Plans (PPPs), Critical Program Information (CPI) analysis, Criticality Analysis (CA), and related program protection frameworks
Ability to identify and assess adversary threats, vulnerabilities, and lifecycle risk to acquisition programs
Strong written and oral communication skills, including the ability to draft technical reports and deliver briefings to senior government officials

Nice To Haves

Masters Degree
Prior USCG or DHS acquisition support experience
Familiarity with USCG acquisition policies and processes (e.g., ACSP, PPP, RAR)
Experience with Supply Chain Risk Management (SCRM) and Program Protection Plans
Experience supporting programs at DHS, USCG, DoD, or other federal civilian agencies with acquisition cybersecurity mandates

Responsibilities

Develop and manage acquisition support activities to integrate Cybersecurity and Program Protection into Coast Guard acquisition policies and lifecycle processes
Define Cybersecurity and Program Protection stakeholder objectives, needs, concerns, security requirements, and associated validation methods
Define system security requirements and associated verification methods; develop security views and viewpoint requirements for system architecture and design
Identify and assess vulnerabilities and susceptibilities to lifecycle disruptions, hazards, and threats across acquisition programs
Develop and manage Cybersecurity and Program Protection guides and acquisition document templates
Develop processes to conduct Critical Program Information (CPI) analysis and Criticality Analysis (CA) to identify CPI, Critical Functions (CF), and Critical Components (CC) as part of developing comprehensive Program Protection Plans (PPPs)
Provide security considerations to inform systems engineering efforts and reduce errors, flaws, and weaknesses that may constitute security vulnerabilities
Identify, quantify, and evaluate costs and benefits of security functions to inform analysis of alternatives, engineering trade-offs, and risk management
Demonstrate through evidence-based reasoning that security claims for the system have been satisfied
Leverage multiple security and other specialties to address feasible solutions for delivering trustworthy, secure systems
Review and provide actionable feedback on Cybersecurity and Program Protection-related acquisition program documents and external policies, including: USCG Acquisition Cybersecurity Strategy (ACSP), USCG Acquisition Program Protection Plan (PPP), USCG Risk Assessment Report (RAR), USCG Cybersecurity Risk management documentation
Support the development and revision of USCG acquisition cybersecurity policies on an as-needed basis