Principal Cyber Security Engineer

Leidos•Linthicum, MD

16h

About The Position

The Principal Cyber Security Engineer joins a small team providing Information Assurance (IA) architecture analysis and security engineering support for implementation and fielding of the National Leadership Command Capability, supporting Nuclear Command, Control, and Communications (NC3), Continuity of Government (COG), and senior-leader communications. In a consultant-like role, the engineer provides technical knowledge, expertise, and advice to the customer. The role leads delivery of threat-informed cybersecurity products, including risk assessments, architecture reviews, and engineering guidance. The work focuses on producing accurate, timely, actionable support for mission partners and helping ensure security objectives and requirements are integrated into system architectures, designs, and operations. An active TS/SCI clearance with polygraph is required.

Requirements

Bachelor of Science degree from an accredited university, ideally in Computer Science, Information Assurance, Information Security System Engineering, or a related field.
At least 20 years of experience as an Information Systems Security Engineer (ISSE) or Systems Engineer on programs and/or contracts in the customer space.
Active TS/SCI clearance with polygraph.
CISSP-ISSEP certification.
Strong writing skills.
Confidence and ability to present briefings to senior-level DoD officials, including prepared briefings and ad hoc discussions.
Expertise in the Risk Management Framework (RMF) and conducting cybersecurity risk assessments.
Expertise in network technology and systems security engineering.
Experience identifying, researching, characterizing, and documenting security weaknesses involving operating systems, software applications, firmware, network hardware components, and network architecture design, as well as identifying protection needs and documented policies and procedures.
Experience developing and documenting system security requirements and conducting requirements gap analysis.
Experience with security monitoring and incident-response capabilities.
Knowledge of and practical experience with NIST Special Publications 800 Series, CNSSI 1253, and DoD 8500.
Ability to work independently within a schedule and with little direction.

Nice To Haves

Experience with emerging technologies such as Zero Trust and cloud computing.
A degree in Computer Science, Information Assurance, Information Security System Engineering, or a related field is described as ideal.

Responsibilities

Conduct cybersecurity risk assessments and provide prioritized risk-mitigation recommendations in support of the customer's mission.
Support the design, implementation, and operation of real-time capabilities to discover, detect, analyze, and mitigate threats and vulnerabilities.
Analyze candidate architectures against defined security requirements, identify security gaps, and recommend mitigation strategies.
Research and evaluate emerging technologies to determine their cybersecurity effectiveness.
Help stakeholders develop, refine, deliver, and implement innovative solutions and capabilities.
Engage stakeholders to define security objectives, protection needs, security requirements, and associated validation methods.
Validate and verify system security requirements and analysis, and establish system security designs.
Design, develop, implement, and integrate IA and security systems and components for networking, computing, and enclave environments, including environments with multiple enclaves and differing data-protection or classification requirements.
Assist architects and system developers in identifying and implementing information security functionality that supports consistent application of Agency security policy and enterprise solutions.
Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and network operations.
Review certification and accreditation (C&A) documentation and provide feedback on completeness and compliance.