Senior System Security Engineer (SSE)

General Dynamics Mission Systems, Inc•Salt Lake City, UT

8d•$142,407 - $150,195•Onsite

About The Position

A successful candidate will possess implementation level details of vulnerabilities and their countermeasures across a wide range of system types including microcontrollers, FPGA based system-on-chip (SoC) system, and workstation grade single board computers. GDMS is equally interested in physical and virtual threat vectors. The primary responsibility of this candidate is to individually contribute to the vulnerability analysis and countermeasure selection/design for subsystem and component (circuit card or device level) elements within U.S. weapon systems.

Requirements

Bachelor's degree in Systems Engineering, or a related Science, Engineering or Mathematics field, plus a minimum of 8 years of relevant experience; or Master's degree, plus a minimum of 6 years of relevant experience.
Ability to obtain a Department of Defense Secret security clearance is required at time of hire.
Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information.
U.S. citizenship is required.
More than five (5) years of proven past performance in embedded systems security design
Advanced knowledge of crypto algorithms, when and how to use each algorithm, vulnerabilities of each algorithm and vulnerabilities inherent to an implementation of each algorithm
Advanced knowledge of attacks and vulnerabilities against hardware and software, as well as an understanding of balancing solutions with acceptable residual vulnerabilities
Advanced understanding of computer hardware and software architectures, including being able to clearly articulate how a CPU works, how a FPGA works, how Operating Systems work and how user space application runtime environments work
Ability to clearly capture complex technical concepts in writing for both technical and general audiences
Strong analytical and problem-solving skills
Must be highly creative and have experience interfacing directly with external customers
Negotiation and the ability to meet challenging customer requirements with win-win solutions
Commitment to ongoing professional development for yourself and others
Identifies opportunities to apply AI for continuous improvement and innovation

Nice To Haves

Experience with US Department of Defense (DoD) embedded systems security
Example Physical threats: Side Channel Analysis against crypto systems, Glitching and fault injection, Invasive and non-invasive chip and circuit card level failure analysis techniques, JTAG and in-circuit debug, Direct Memory access and bus protocol exploitation
Example Virtual threats: Software exploitation, Firmware Exploitation, Root Kits and Boot Kits, Protocol exploitation, Cryptanalysis, CPU Side Channel Analysis, Rowhammer

Responsibilities

Evaluate proposed or existing system architectures for reverse engineering and cyber exploitation vulnerabilities
Document vulnerabilities in white papers and attack countermeasure analysis
Architect system level security design and requirements to address the vulnerabilities enumerated within U.S. weapon systems.
Prepare for, attend, and brief and customer and government design review meetings
Participate in all aspects of the product design life cycle including system architecture, design, development, and verification
Distill complex technical concepts into clear and concise writing to support proposals for new opportunities
Contribute to new product ideas and proposals
Participate in industry working groups and provide security recommendations to relevant government and commercial standards, policies, and procedures