Apply on Employer Site

Modern Technology Solutions, Inc. (MTSI) · 1 week ago

Senior Cybersecurity Systems Engineer

Washington, DC

Full-time

Onsite

Senior Level, Lead/Staff

10+ years exp

Modern Technology Solutions, Inc. (MTSI) is seeking a Senior Cybersecurity Systems Engineer whose primary function will be to work with Special Access Programs supporting the Department of Defense. The role involves providing security engineering support throughout the system development lifecycle and interfacing with program managers to explain security goals and mitigations.

Information Technology

Growth Opportunities

No H1B

Security Clearance Required

Responsibilities

Understanding operational needs of systems at varied stages of the SDLC through participation in acquisition meetings (PMR, PDR, CDR, etc.) and concept of operation (CONOP) working groups

Designing and developing security requirements that drive down risk while maintaining operational capability

Working between architecture-level and implementation-level engineering meetings to maintain a system-wide view of security functions and apply risk mitigation strategies at the appropriate level

Guiding and verifying defense contractors’ work against program requirements and goals. This includes participating in technical discussions, trade studies and working groups, and conducting research on industry best practices for potential implementation

Interfacing with program managers to explain security goals and mitigations relative to their priorities of cost and schedule

Select and tailor controls from the NIST SP 800-53 control catalog in view of system needs and constraints

Review system and network artifacts and conduct assessments against selected control baselines, assessing residual risk and providing recommendations to the Authorizing Official

Evaluate software and hardware prior to entry to networks

Qualification

DoD 8500.1-MNIST SP 800-53Security Control AssessorSpecial Access ProgramsIAM II CISSPIAM II CISMResearch skillsTechnical proficiency in securityCommunication skills

Required

10+ years' of related technical experience

Firm understanding of the DoD 8500.1-M, Joint SAP Implementation Guide (JSIG), National Institute of Standards and Technology (NIST) Special Publication 800-53

Demonstrated ability to assess and articulate risk, including to non-technical audiences

Demonstrated history finding unique mitigations to varied systems' security challenges

Demonstrated technical proficiency in at least one area of security (e.g. communications, networks, embedded systems, software, system testing or assessment, etc.)

Strong research skills and a desire to learn new (emerging OR existing but unfamiliar) technologies

Strong communication skills, written and oral

Able to travel ~30% of time for program meetings

Masters Degree in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering or related engineering discipline

An active TS/SCI clearance is desired

Preferred

Experience with: Special Access Programs, acquisition programs, software engineering or code review

Sub-field specific certifications. For example – cloud (e.g. CCSP, AWS Solutions Architect), offensive security (e.g. OSCP, GPEN), operating systems (Microsoft/Linux administration), etc