System Security Engineer (SSE) will provide technical support to formally register Department of Defense (DoD) acquisition programs with their applicable cybersecurity program(s). SSE will assist in conducting trade-off analyses and will integrate contributions from system security engineering disciplines such as anti-tamper, cybersecurity, exportability features, hardware assurance, software assurance, supply chain risk management, and security specialties (personnel security, industrial security, physical security, etc.) Essential Job Functions: Responsible for ensuring the development and delivery of cybersecurity and program protection capability for DoD acquisition programs through the implementation of an approach based on cost, schedule, performance, and risk. Lead the evaluation and balancing of security contributions to produce a coherent security capability across the technology system and the DoD acquisition program, in order to integrate all aspects of system security. Assist in conducting trade-off analyses and will integrate contributions from system security engineering disciplines such as anti-tamper, cybersecurity, exportability features, hardware assurance, software assurance, supply chain risk management; and security specialties (personnel security, industrial security, physical security, etc.). Focus on Cyber survivability to assess the ability of the system to perform its mission and functions, in the face of cyber-attack, by the anticipated adversaries, and to operate effectively in a cyber-contested environment. The outcome of the SSE's efforts will be a comprehensive program and system protection strategy within the constraints of cost, schedule, and performance while maintaining an acceptable level of risk. Some of the specific tasks will involve the following: Provide a program protection assessment of requirements documents to program management. Identify critical program information (CPI) including inherited designated science and technology information. Determine the threat to CPI. Identify personnel required to fulfill all pertinent program protection roles to engineering and program management. Identify vulnerabilities to CPI. Perform risk analysis. Recommend appropriate security controls for an acquisition program. Provide technical support to register an acquisition program with the applicable component(s) cybersecurity program. Document program protection planning in the systems engineering plan (SEP), PPP and system security plan (SSP). Less than 5% travel is anticipated.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Job Type
Full-time
Career Level
Mid Level