Cyber Systems Security Engineering Stf - E4

Requisition  Eligible?:
Yes

ERP amount: $50 LMRecognition

Relocation:
Possible Type:
Exempt

Shift: 1

Clearance Prior to Start:
Top Secret with Investigation or CV date within 5 years

Final Clearance:
Top Secret with Investigation or CV date within 5 years

Pay Transparency: $ - $Experience Level: Experienced Professional FT/PT/Casual:
Full Time Department : LM Aeronautics Co
- Palmdale Business Unit: LM Aeronautics Co
- Palmdale Standard

Job Description Responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle. Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. Coordinates and addresses Supply Chain risk management concerns. Develop, evaluate and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain.

Coordinate with Cyber and system architects and developers to provide oversight in the development of solutions. Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements. Employs cyber security processes, methods, techniques and tools and assure their consistent application. Implements appropriate Assessment and Authorization activities as required by customers.
* USE OF THIS CLASSIFICATION REQUIRES AUTHORIZATION FROM THE BUSINESS AREA CYBER DIRECTOR OR DELEGATE
* Basic Qualifications Acitve Secret ClearanceIASAE Level II - IAW 8570 or higher certification (CASP+ CE, CISSP, CSSLP)
Ability to travel as required (typically up to 20%)Desired SkillsB.S. degree in a technical disc

Wine such as Computer Science, Computer Engineering,Electrical Engineering, Computer Security, or Information Technology — or equivalent applied experience

Experience utilizing Joint Special Access Program(SAP) Implementation Guide (JSIG), Committee on National Security Systems Instruction (CNSSI)1253, and NIST sp 800-37 Risk Management Framework (RMF) to design and hardeninformation systems commensurate with customer needs

Ownership of, or ability to acquire and maintain,a CAC Card is strongly desired

Experienced with ACAS software (Nessus and Tenable. SC)
Ability to troubleshoot ACAS software (Nessusand Tenable.SC)
Experienced with SCC SCAP tool to conductcompliance assessment

Ability to troubleshoot SCC SCAP tool

Have knowledge of Group Policy ManagementSTIG experience

Work alongside software team to find commonground on STIGsExperience analyzing, decomposing, and allocating security controls into executablesecurity requirements at the system, sub-systemand component level

Experience with secure software development concepts (e.g. static code analysis, dynamic codeanalysis, STIG/SRG hardening, etc.) as applied tohigh-level programming languages (C, C++,Java)

Experience with engineering change processes and/or configuration control processes

Extensive experience developing and maintainingcore security documentation artifacts for A&APackages including Security Control Traceability Matrix (SCTM), System Security Plan (SSP) and/or Information Assurance Standard Operating Procedures (IA SOP), Plan of Action &Milestones (POA&M), and Risk Assessment Report (RAR)
Extensive knowledge of DoD Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)
Background/knowledge working with information systems/environments that utilize the Open Mission Systems (OMS) standard and Universal Command and Control Standards Initiative (UCI) message set Expertise/knowledge in both compliance testing and penetration testing methodologies.

Experience with Real-Time Embedded Operating Systems (e.g. Green Hills…