Senior Cybersecurity Systems Engineer

Modern Technology Solutions Inc•Chantilly, VA

1d•$160,000 - $210,000•Onsite

About The Position

MTSI is seeking a Senior Cybersecurity Systems Engineer whose primary function will be to work with Special Access Programs (SAPs) supporting Department of Defense (DOD), Headquarters United States Air Force, and MTSI Operations. The position will provide direct security engineering support to the Air Force acquisition community throughout the system development lifecycle (SDLC). This position will be at Joint Base Anacostia-Bolling (JBAB).

Requirements

20+ years' of related technical experience.
Firm understanding of the DoD 8500.1-M, Joint SAP Implementation Guide (JSIG), National Institute of Standards and Technology (NIST) Special Publication 800-53
Demonstrated ability to assess and articulate risk, including to non-technical audiences.
Demonstrated history finding unique mitigations to varied systems’ security challenges.
Demonstrated technical proficiency in at least one area of security (e.g. communications, networks, embedded systems, software, system testing or assessment, etc.).
Strong research skills and a desire to learn new (emerging OR existing but unfamiliar) technologies.
Strong communication skills, written and oral.
Able to travel ~30% of time for program meetings.
An active TS/SCI clearance is required.

Nice To Haves

Experience with: Special Access Programs, acquisition programs, software engineering or code review
IAM II (e.g. CISSP, CISM)
Sub-field specific certifications. For example – cloud (e.g. CCSP, AWS Solutions Architect), offensive security (e.g. OSCP, GPEN), operating systems (Microsoft/Linux administration), etc.

Responsibilities

Understanding operational needs of systems at varied stages of the SDLC through participation in acquisition meetings (PMR, PDR, CDR, etc.) and concept of operation (CONOP) working groups.
Designing and developing security requirements that drive down risk while maintaining operational capability.
Working between architecture-level and implementation-level engineering meetings to maintain a system-wide view of security functions and apply risk mitigation strategies at the appropriate level.
Guiding and verifying defense contractors’ work against program requirements and goals. This includes participating in technical discussions, trade studies and working groups, and conducting research on industry best practices for potential implementation.
Interfacing with program managers to explain security goals and mitigations relative to their priorities of cost and schedule.
Select and tailor controls from the NIST SP 800-53 control catalog in view of system needs and constraints.
Review system and network artifacts and conduct assessments against selected control baselines, assessing residual risk and providing recommendations to the Authorizing Official.
Evaluate software and hardware prior to entry to networks.