Systems Security Engineer (SSE), Journeyman

Kairos•Pax River, MD

11h•$130,000 - $145,000

About The Position

KAIROS, Inc is searching for an energetic, experienced, and highly motivated Systems Security Engineer (SSE), Journeyman, to join our team. Established in July 2013, KAIROS, Inc. is a growing Woman Owned Small Business (WOSB) providing full life cycle Cybersecurity, Program Management, Engineering, Logistics, Additive Manufacturing, and Training and Education services focused on optimizing customers’ program performance and mission through proven methodologies and ethical practices. Our headquarters is in California, MD near Naval Air Station Patuxent River. We offer competitive salaries and benefits with outstanding growth potential. This position will provide Systems Security Engineering support to the Unmanned Carrier Aviation Program Office (PMA-268) located at Patuxent River Naval Air Station.

Requirements

Strong customer relations, analytics, documentation skills
Self-starter, highly motivated, strong work ethic with a commitment to quality
Microsoft office suite proficiency, i.e., Word, Excel, PowerPoint
Ability to work within a challenging, fast-paced, team-oriented environment
Ability to work independently
Ability to multi-task and meet competing, deliverable deadlines
Detail oriented
Excellent interpersonal and customer service skills
Excellent verbal and written communication skills to provide clear status and/or communicate issues
Ability to adapt to evolving technology
Demonstrated experience in an area of engineering expertise is required.
Bachelor’s degree in technical or scientific field from an accredited college or university.
Minimum of seven (7) years of cyber-related experience in a DoD environment is highly desired
Meet DoD 8570.01-M/8140 IAT Level I or II requirements (e.g., Security+ CE)
This position is subject to a government security investigation and must meet eligibility requirements for access to classified information.
In order to complete the requirements for government security clearance investigation you must be a U.S. Citizen and be able to complete the full background investigation.
This position requires an Active Secret Security Clearance.

Nice To Haves

Program office experience highly desired
Aviation engineering experience highly desired

Responsibilities

Provide support to PMA-268 Cyber Leads in execution of the PMA-268 Cybersecurity Program
Provide support in drafting and reviewing Program Documentation, Policies and Plans.
Coordinate with PMA-268 Cyber Leads when changes occur that might affect the system’s security posture, cybersecurity authorization(s) and/or certifications.
Lead product specific System Security Engineering activities for all systems within scope of IPT
Provide oversight of all IPT cybersecurity activities.
Review system documentation to obtain and sustain Subject Matter Expert (SME) level knowledge of the system architecture, functionality and capabilitie
Work closely with the IPT Class Desk and IPT Leadership to ensure early engagement when cybersecurity items may impact the program's cost, schedule, or performance.
Develop and maintain a cyber schedule to include a detailed Work Breakdown Schedule (WBS) for significant efforts.
Provide input for SOWs, DIDs, and CDRLs for IPT contract activities.
Identify, define, and document system security requirements for incorporation of product specifications.
Conduct derivation and traceability of cyber requirements.
Track execution and performance of security measures to protect information and network infrastructure and computer systems.
Conduct critical function analysis.
Identify Mission Essential Functions (MEF).
Lead Critical Program Information (CPI) assessments.
Understand vulnerabilities and attack vectors that can impact the cyber posture of the systems/environment.
Identify and recommend security solutions to PMA-268 Cyber Leads.
Perform SSE duties in support of Cyber Survivability Risk Assessments (CSRA) and CYBERSAFE to include leading execution of collaborative development of artifacts and data (Objective Quality Evidence, Mission Critical Function/Component Traceability).
Lead DFIA implementation efforts through definition of enclaves and enclave boundary protection requirements.
Lead system security certification and registration activities (e.g. CSfC, CDS, Cryptographic Modules).
Lead IPT cybersecurity activities
Initiate, communicate, and coordinate with stakeholders and SMEs to address actions and RFIs required for IPT cybersecurity activities in a timely manner (no actions/RFIs to be stagnant for longer than 2 weeks).
Lead IPT SSE Working Group (SSEWG) to:
Coordinate with Contractors/Organizations supporting IPT cybersecurity efforts.
Maintain awareness of authorization of Systems/Subsystems.
Review all IPT cybersecurity CDRLs.
Actively participate as a stakeholder in change management processes to ensure cybersecurity posture is not impacted due to a change.
Coordinate Risk Management (Opportunities, Issues, Risks) activities with Risk Managers (Cyber, PMA, Product) to document, socialize and work mitigation steps.
Assist IPT ISSO with the following activities identified in the PMA-268 Cyber RMF Roles and Responsibilities chart:
Defining Information Types: work with engineering to ensure the proper information types for the system(s) are identified.
Approval of CIA: identify the initial CIA impact levels for the identified information types and socialize with the Class Desk for concurrence.
Review POA&M: ensure awareness of all open findings and identify areas of concern that need to be socialized with the Class Desk when cost, schedule, or performance impacts are identified.
Assist the ISSO with mitigation identification for open findings.
Review hardware/software lists: investigate potential issues (e.g. Open Source, foreign software).