Job DescriptionIn the Space & Intelligence Division of Aerospace and Mission Systems (AMS), you'll help develop systems that sense, control, exploit, and disseminate actionable information to warfighters supporting critical national security missions.
We are seeking an experienced Cybersecurity Architect to join the Cyber Resilience Capability Group (CRCG) and help ensure the security, resilience, and accreditation of mission-critical systems throughout their lifecycle. This role requires deep expertise in cybersecurity engineering, the Systems Development Lifecycle (SDLC), and the Department of Defense Risk Management Framework (RMF), including Assessment and Authorization (A&A) activities. The successful candidate will collaborate with program teams, engineering organizations, and government stakeholders to integrate security throughout system design, development, testing, and sustainment. As a key member of a team of cybersecurity professionals, you will partner with engineers, program leadership, and government stakeholders to guide RMF execution and deliver secure, resilient, high-technology solutions to the warfighter. If you're passionate about solving complex cybersecurity challenges and enabling critical mission success, we'd like to hear from you.
Responsibilities include:
- Supporting systems engineering teams
- Supporting Assessment and Authorization (A&A) activities for DoD Systems in accordance with Risk Management Framework
- Supporting traditional systems engineering tasks such as CONOPS, requirements development and allocation, cyber design engineering, cyber implementation engineering, verification and Validation, and continuous monitoring efforts during deployment, Operations and Sustainment
- Supporting offensive architecture analysis and design of defense-in-depth solutions
- Supporting Development Security Operations (DevSecOps) integration
- Supporting the development and assessment of system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestones
- Conducting and analyzing vulnerability assessments to validate system compliance with RMF controls and DISA Security Technical Information Guidelines (STIG)
- Analyzing static code scans and dynamic code scans to validate Application Security and Development STIG compliance
This position requires monthly local business travel to an offsite work location in El Segundo, CA in support of customer meetings, product demonstration, integration and/or systems testing.
Required Skills and Education- Six or more year experience in a Cyber, Systems, or Software engineering/technical discipline with relevant training and/or certifications.
- At least one DoDM 8140 (DCWF 652-series) compliant certification: CCSP, CISSP-ISSEP/ISSAP, CSSLP, Cloud+ or equivalent
- Understanding of MBSE and experience with Cameo
- Supporting Assessment and Authorization (A&A) activities for DoD Systems in accordance with Risk Management Framework and Zero Trust Architecture
- Supporting traditional systems engineering tasks such as CONOPS, requirements development and allocation, verification and Validation, and continuous monitoring efforts during deployment, Operations and Sustainment
- Supporting cyber design engineering and cyber implementation engineering
- Supporting Development Security Operations (DevSecOps) integration
- Supporting development and assessment of system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestones
- Conducting and analyzing vulnerability assessments to validate system compliance with RMF controls and DISA Security Technical Information Guidelines (STIG)
- Analyzing static code scans and dynamic code scans to validate Application Security and Development STIG compliance
- Good planning and organizational skills
- Strong oral and written communications skills
Preferred Skills and Education- Bachelor of Science degree in a Cyber, Systems, or Software engineering discipline, and 6+ year(s) related experience or equivalent experience, training and/or certifications.
- Other cyber certifications desired (e.g., GISF, CASP+, Cloud+, GSEC, AWS CSA Professional, OSCP, etc.)
- Understanding of Zero Trust Architecture and ability to model Zero Trust into the overall system architecture.
- Understanding of offensive security tactics, techniques and procedures
- Experience with Cyber Failure Mode, Effects, and Criticality Analysis (FMECA)
- Experience writing proposals with innovative cost-effective solutions
- Experience with offensive architecting, threat modeling and attack vector analysis
- Experience with cloud and cross domain solution accreditations
- Ability to negotiate effectively with higher level managers, functional managers, customers, industry partners, and teammates
- Demonstrated leadership skills (supervisory experience, building teams, building customer relationships)
- Experience with leading and coordinating security test events to achieve accreditation milestones
- Experience with verifying and validating vulnerability resolutions and/or mitigations
- Experience with Attack and Threat modeling
- Strong mentoring skills
- Good planning and organizational skills
- Strong oral and written communications skills
This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.
