System Security Engineer / Cybersecurity Engineer

System Security Engineering & Program Protection

• Develop and manage acquisition support activities to integrate Cybersecurity and Program Protection into Coast Guard acquisition policies and lifecycle processes
• Define Cybersecurity and Program Protection stakeholder objectives, needs, concerns, security requirements, and associated validation methods
• Define system security requirements and associated verification methods; develop security views and viewpoint requirements for system architecture and design
• Identify and assess vulnerabilities and susceptibilities to lifecycle disruptions, hazards, and threats across acquisition programs
• Develop and manage Cybersecurity and Program Protection guides and acquisition document templates
• Develop processes to conduct Critical Program Information (CPI) analysis and Criticality Analysis (CA) to identify CPI, Critical Functions (CF), and Critical Components (CC) as part of developing comprehensive Program Protection Plans (PPPs)
• Provide security considerations to inform systems engineering efforts and reduce errors, flaws, and weaknesses that may constitute security vulnerabilities
• Identify, quantify, and evaluate costs and benefits of security functions to inform analysis of alternatives, engineering trade-offs, and risk management
• Demonstrate through evidence-based reasoning that security claims for the system have been satisfied
• Leverage multiple security and other specialties to address feasible solutions for delivering trustworthy, secure systems

Acquisition Document Review & Policy Support

• Review and provide actionable feedback on Cybersecurity and Program Protection-related acquisition program documents and external policies, including:
• USCG Acquisition Cybersecurity Strategy (ACSP)
• USCG Acquisition Program Protection Plan (PPP)
• USCG Risk Assessment Report (RAR)
• USCG Cybersecurity Risk management documentation
• Support the development and revision of USCG acquisition cybersecurity policies on an as-needed basis

Do you have experience in Technical report writing?, Do you have a Bachelor’s degree?, * Bachelor’s Degree in Information Technology, Cybersecurity, Systems Engineering, Computer Science, or a related field

• 10+ years of Information Technology (IT)-related experience, including 3+ years in a management or supervisory capacity and 3+ years of direct experience in cybersecurity, program protection, or acquisition security
• Active Secret security clearance at time of hire
• Demonstrated experience supporting DoD or DHS acquisition programs, including integration of cybersecurity and program protection into the acquisition lifecycle
• Working knowledge of Program Protection Plans (PPPs), Critical Program Information (CPI) analysis, Criticality Analysis (CA), and related program protection frameworks
• Ability to identify and assess adversary threats, vulnerabilities, and lifecycle risk to acquisition programs
• Strong written and oral communication skills, including the ability to draft technical reports and deliver briefings to senior government officials

Preferred

• Masters Degree
• Prior USCG or DHS acquisition support experience
• Familiarity with USCG acquisition policies and processes (e.g., ACSP, PPP, RAR)
• Experience with Supply Chain Risk Management (SCRM) and Trusted Systems and Networks (TSN) concepts
• Experience supporting programs at DHS, USCG, DoD, or other federal civilian agencies with acquisition cybersecurity mandates