Senior System Security Engineer

Join to apply for the Senior System Security Engineer role at K , Inc..

K ’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

• Innovative Projects: K ’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.
• Collaborative Environment:
  Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
• Impactful Work:
  Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

K , Inc. is seeking a highly skilled and experienced System Security Engineering SME to support the Air Force’s Advanced Battle Management System (ABMS) Division. Responsible for providing expert-level system security engineering guidance, including cybersecurity guidance, on this complex program. Ensure that interfaces to other service, DoD and Intelligence Community (IC) efforts in support of Joint All Domain Command and Control (JADC2) are engineered using appropriate system security engineering practices.

This role will focus on implementing, maintaining, and managing system security engineering requirements in compliance with Air Force, DoD and IC instructions and directives across the various ABMS product lines. Provide technical advice to Air Force acquisition teams, ensuring that all system security engineering requirements are met across the entire acquisition lifecycle, from program initiation through system deployment, maintenance, and decommissioning.

• Provide subject matter expertise on system security engineering requirements and practices during all phases of the acquisition lifecycle, from materiel solution analysis through production, deployment, and operations and support.
• Ensure ABMS acquisition processes and documents align with appropriate system security statutory and regulatory requirements.
• Develop and lead execution of the ABMS Cybersecurity Strategy (CSS).
• Develop and lead execution of the ABMS Program Protection Plan (PPP) and its appendices, including Anti-Tamper/CSS, which details critical program technologies and information which must be protected.
• Address System Security During Design.
• Provide subject matter expertise to product delivery teams to ensure their systems are designed, developed, and maintained securely.
• Advise on security considerations for critical infrastructure and classified systems as they relate to Air Force acquisition efforts (e.g., SCI, SAP, Collateral, and CUI).
• Conduct system security evaluations and support certification and accreditation processes to ensure the systems align with AFI 17-101, DoD 8570.01-M, and other relevant directives.
• Cybersecurity Compliance, Risk Management and Documentation:
  Oversee compliance with the Risk Management Framework (RMF) as outlined by NIST and DoD Instruction 8510.01, specifically focusing on Air Force-specific requirements for System Security Authorization and Security Assessment Reports (SAR).
• Lead the development of Assessment and Authorization (A&A) packages, ensuring full compliance with DoD 8500.2 and AFI 17-101, including Security Test & Evaluation (ST&E) reports and Cybersecurity Risk Assessments.
• Support the development of System Security Plans (SSPs), Security Assessment Reports (SARs), and other cybersecurity documentation for Air Force systems and programs.
• Ensure Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) clauses relating to system security are implemented.
• Advise program managers about Cybersecurity Maturity Model Certification (CMMC) compliance requirements and assist contractors in achieving necessary certification levels.
• Lead the response to cybersecurity incidents involving assigned systems, ensuring swift identification, containment, and…