Secure Computing Engineer - ELSYS - Tucson, AZ - (Open Rank)

site-logo•Tucson, AZ

15h•Onsite

About The Position

The Georgia Tech Research Institute (GTRI) is seeking an Information Cybersecurity Engineer for the Applied Embedded Systems (AES) Division within the Electronic Systems Laboratory (ELSYS). This role is part of the Electromagnetic Spectrum Operations (EMSO) Platform & Training Branch (EPTB), which supports EMSO platforms like the USAF EA-37B Compass Call and the legacy EC-130H Compass Call. EPTB provides rapid reprogramming, development, integration, testing, and fielding of EMSO hardware/software tools, as well as advanced EW and EMSO education and training. This specific opportunity will support the 55th Electronic Combat Group (55 ECG) at Davis-Monthan Air Force Base (DMAFB) in Tucson, AZ, focusing on the cybersecurity management of application-based capabilities for the Compass Call Mission Systems. The position requires expertise in classified computer systems to execute cybersecurity programs and processes.

Requirements

Ability to obtain Top Secret clearance
Hands-on experience managing or supporting secure/classified IT systems (e.g., classified workstations, lab equipment, secure networks)
Hands-on experience implementing and documenting security controls in accordance with DoW, NIST, or similar frameworks
Hands-on experience preparing or maintaining cybersecurity documentation (SSPs, POA&Ms, procedures, system diagrams, etc.)
Understanding of RMF processes and ATO/authorization activities
Ability to work on-site in secure areas and handle classified materials in accordance with applicable regulations
5 years of related experience with a Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field of study
3 years of related experience with a Masters’ degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field of study
0 years of related experience with a Ph.D. in Computer Science, Information Technology, Cybersecurity, Engineering, or related field of study
Candidates must be U.S. Citizens.
Candidates must be able to obtain and maintain an active security clearance.

Nice To Haves

Active Secret Clearance or Active Top Secret Clearance
DoD 8570/8140-compliant certification (e.g., Security+, CySA+, CASP+, CISSP, or equivalent)
Experience supporting USAF or other US Military Service-specific cybersecurity processes, particularly with organizations such as USAF Program Offices (to include 645th Aeronautical Systems Group “Big Safari”), 16th Air Force, Headquarters Air Combat Command, or Headquarters USAF
Experience with developmental and operational test (DT/OT) environments and handling of classified test data
Familiarity with Windows and/or Linux system administration in secure environments
Familiarity with networking concepts and secure configuration (firewalls, VLANs, VPNs, etc.)
Familiarity with secure lab operations, including test equipment, radios, and embedded or tactical systems
Strong documentation skills and attention to detail; ability to translate technical configurations into clear, compliant artifacts.
Comfortable performing hands-on “boots on the ground” IT tasks, including physical system setup, troubleshooting, and inventory/asset management
Experience or expertise in one or more of the following: (1) EMSO (2) EW test and evaluation, (3) Military Planning (4) Signals Intelligence (SIGINT), (5) Tactical datalinks and/or military communications protocols

Responsibilities

Architect, design, implement, and maintain classified computer systems/networks and cyber security solutions for classified networks, including government enclaves.
Identify and define new cybersecurity objectives and controls.
Develop and maintain automated security validation toolsets.
Conduct system, network, or software risk assessments.
Perform vulnerability analysis of open source software.
Integrate new architectural features into existing infrastructures.
Create cybersecurity architectural artifacts.
Provide architectural analysis of cybersecurity features and relate existing systems to future needs and trends.
Leverage advanced forensic tools and techniques for incident response.
Provide engineering recommendations and resolve integration and testing issues.
Serve in a consultative role on GTRI systems and projects.
Define cybersecurity controls for different systems and networks.
Respond to alerts with the system or networks based on defined threats.
Interact, advise, and counsel internal staff, project directors, and other internal/external stakeholders.
Ensure cybersecurity needs are established and maintained for operations, security requirements definition, security risk assessment, information systems analysis, information systems design, certification and accreditation, information systems hardening, configuration and maintenance of security boundary devices (IDS/IPS, Firewalls, perimeter routing), vulnerability scanning, incident response, disaster recovery, and operations continuity planning.
Provide analytical support for security policy development and analysis.
Engineer, implement, and maintain Information Technology Infrastructure and associated cybersecurity controls, including virtual infrastructure, servers, workstations, storage fabrics, heterogeneous operating systems, and networking infrastructure.
Maintain backups and manage disaster recovery and business continuity plans.
Perform routine maintenance, upgrades, and deploy new classified information systems.
Design system architecture (compute, hardware/virtual, OS, storage, networking, security).
Translate researcher IT needs into robust and scalable IT Solutions/Infrastructure.
Contribute to the development of Continuous Integration and Continuous Development (CICD) processes using DevOps and DevSecOps principles.
Implement Cross Domain Data Exchange and Systems Integration.
Implement Infrastructure as Code.
Manage virtual machines.
Validate security control configuration on systems, ensuring compliance with STIGS, CMMC, and similar requirements.
Collaborate with customers and external teams, deriving tasks from detailed requirements.
Provide tasking to other team members based on derived tasks.
Perform software and merge request code reviews.
Act as the primary gatekeeper for infrastructure as code merges.
Ensure software adheres to coding standards and practices.
Perform day-to-day cybersecurity tasks for classified hardware and software across the application development lifecycle.
Execute "boots on the ground" Information Systems Security Manager (ISSM)-like duties in support of the program.
Support Information Systems Security Officer (ISSO) and Program Manager, including security documentation and tracking.
Develop, update, and maintain Risk Management Framework (RMF)/Authorization to Operate (ATO) artifacts such as System Security Plan (SSP), Plan of Action and Milestones (POA&Ms), procedures, checklists, and evidence.
Provide hands-on IT support for classified IT equipment, including Compass Call mission system application Software Development Kits (SDKs)/Hardware Development Kits (HDKs), trainers, radios, test equipment, and encrypted media.
Configure, maintain, and troubleshoot secure workstations, servers, and lab systems in classified environments.
Handle, label, track, and sanitize various levels of classified and controlled unclassified information (CUI) media.
Support security assessments, audits, inspections, vulnerability management activities, and the implementation of mitigations.
Assist in preparing and coordinating cybersecurity and authorization packages with internal stakeholders.
Support interactions with all stakeholders (DoW, Intelligence Community, USAF, other US Military Services, 55 ECG personnel, and other contractors) by responding to data calls and providing technical cybersecurity input.
Participate in incident response, technical reviews, and user training and awareness activities.
Support incident response activities for secure systems, including initial triage, documentation, and coordination.
Participate in design and technical review meetings to provide cybersecurity input and ensure compliance with DoW and USAF requirements.
Assist with user training, briefings, and awareness activities related to secure system operations and cybersecurity policy compliance.
Perform other duties as assigned.