Cybersecurity Systems Engineer

ASRC Federal Mission Solutions is a premier provider of systems engineering, software engineering, system integration and project management services for real-time, mission-critical defense systems.

We are seeking a Cybersecurity Systems Engineer to support development and sustainment of the U.S. Navy Aegis Weapon System in Moorestown, NJ.  The role supports cybersecurity systems engineering with emphasis on cybersecurity requirements development and decomposition, system design and architecture, MBSE, security controls, risk assessment, verification planning, and technical documentation. This is not an entry-level, cybersecurity operations, or system administration role; candidates must bring practical cybersecurity experience and be able to apply cybersecurity principles, controls, and technologies to system requirements, architecture, design, and verification.

Roles and Responsibilities:

• Develop, decompose, and maintain cybersecurity requirements and traceability.
• Translate RMF and NIST SP 800-53 controls into system and functional requirements.
• Develop and maintain cybersecurity architecture and MBSE artifacts.
• Evaluate system designs, interfaces, and changes for cybersecurity impacts and risk.
• Apply cybersecurity technologies and concepts to system architecture and design.
• Develop verification approaches and acceptance criteria for cybersecurity requirements and controls.
• Support integration, test, and resolution of cybersecurity-related issues.
• Perform cybersecurity risk assessments and develop associated technical and RMF documentation.
• Collaborate with systems, software, network, test, and cybersecurity teams throughout the engineering lifecycle.

Requirements:

• U.S. citizenship and an active U.S. Government Secret security clearance are required.
• Ability to work on-site in engineering and laboratory environments.
• Bachelor’s degree in Engineering, Computer Science, Cybersecurity, Systems Engineering, or a related technical discipline.
• 2+ years of professional cybersecurity or cybersecurity systems engineering experience, including requirements analysis, decomposition and development, system design and architecture, and MBSE.
• Experience applying cybersecurity principles, security controls, and cybersecurity architecture concepts to system design, implementation, and verification.
• Experience with the Risk Management Framework (RMF) and NIST SP 800-53, including interpretation and application of security controls.
• Working knowledge of cybersecurity technologies and architectures including Zero Trust Architecture (ZTA), SIEM, next-generation firewalls (NGFW), identity and access controls, and network security.
• CompTIA Security+ certification or other DoD 8570 IAT/IAM Level 2+ approved certification.
• Experience using requirements management tools such as DOORS Next Generation (DNG) or equivalent.
• Experience using MBSE and system modeling tools such as Cameo, Rhapsody, or equivalent.
• Working knowledge of Windows-based environments and the interaction between operating systems, networks, applications, and cybersecurity controls.
• Experience developing verification approaches, test objectives, or acceptance criteria from cybersecurity requirements and security controls.
• Ability to quickly learn unfamiliar systems and technologies and work effectively in a fast-paced engineering environment where technical and program priorities may shift.
• Strong written and verbal communication skills, including the ability to clearly document cybersecurity requirements, architecture, controls, risks, and verification rationale.

Preferred but Not Required Experience:

• Experience with Red Hat Linux or other Linux/Unix-like environments.
• Experience with large-scale combat systems, radar systems, sensor systems, weapon systems, or other complex software-intensive systems.
• Experience supporting cybersecurity engineering within a larger system-of-systems architecture.
• Experience supporting formal engineering reviews such as SRR, PDR, CDR, TRR, or equivalent.
• Experience preparing formal engineering, cybersecurity, RMF, or customer-deliverable documentation.
• Prior experience with Navy, DoD, or other mission-critical systems.