System Cybersecurity Engineer

Position Summary

Odyssey Systems is recruiting for a System Cybersecurity Engineer to join the team, supporting the Space Systems Command Space Warning and Surveillance Systems Support Operations Ground Based Radars/Perimeter Acquisition Radar Attach Characterization System.

 

As the System Cybersecurity Engineer, you will be involved in managing and assisting with the full integration of cybersecurity into all phases of acquisition, upgrade, and modification programs, including design, development, testing, fielding, operation, sustainment, and assessment of Risk Management Framework (RMF) compliance.

 

Cybersecurity support encompasses cybersecurity processes, procedures, and functions to include reviewing data and assessing compliance of the cybersecurity posture for systems. You will provide cybersecurity A&A support services, assist the Government in preparing system cybersecurity documentation related to operations, and reviews cybersecurity documentation to ensure satisfaction of Security Engineering and Assessment requirements (system control identification). This shall include reviewing implementation and validation plans, assisting with the entry and review of entered information to the Information Technology Investment Portfolio System (ITIPS), assisting with the preparation and review of Federal Information Security Management Act (FISMA) documentation, and assessing system compliance and enter data into Enterprise Mission Assurance Support Service (eMASS).

 

This is a full-time opportunity at Peterson SFB in Colorado Springs, CO, and will be in direct support of the primary mission of SSC/SZQP which is to support networks and associated components through an enterprise-wide set of integrated mission capabilities, support services, and data products that provide military authorities with accurate, timely, unambiguous and continuous warning and attack assessment of air, missile and space threats.  The Legacy Space Branch sustains unique space C2 systems, networks and associated components through an enterprise-wide set of integrated mission capabilities, support services, and data products that provide space situational awareness, object tracking and deconfliction.

 

Responsibilities

Duties include, but not limited to: 

 

Provide direct support to the SSC/SZQP program office which shall enable the Strategic Warning and Surveillance System Division (SW&SS) to effectively execute, monitor and document cybersecurity efforts on architecture upgrades and sustainment efforts to include: 

• Provides support to the SSC/SZQP program office security system engineering team during the system requirement definition, design, implementation, and testing phases of programs; ensure operating Assist, develop, prepare, and deliver to the Government compliant program management deliverables required to plan and contract for sensor and command and control systems in the SW&SS Division portfolio.
• Provide oversight on the development and sustainment of the systems security posture of the systems and the Certification and Accreditation (C&A) / Authorization packages.
• Ensures the Risk Management Framework (RMF) documentation defines security procedures for system users, administrators, and maintainers; ensure information system life-cycle responsibilities are documented to include responsibility for re-accomplishing risk analysis, security testing, and certification due to modification or changes to the systems; maintain C&A info in the Systems Compliance Database, Information Assurance Repository Directory website.
• Security Authorization requirements, developing and enhancing the security risk posture, and analysis and reporting of Cybersecurity metrics, demonstrated expertise in security policy and implementation.
• Utilize National Institute of Standards and Technology (NIST) 800 series special publications in the development of new system artifacts to ensure compliance with new RMF requirements and to interpret requirements as necessary to ensure system compliance or provide operational justification when deemed necessary.
• Documents Authorization To Operate (ATO), (through ITIPS, eMASS, RMF, etc.); review Federal Information Security Management Act (FISMA) reports and coordinate updates as required for RMF packages to ensure the Investment Technology Investment Portfolio System (ITIPS) for the program is current; support the completion of all Cybersecurity taskers (Annual Control Validations, NC3 Cyber Updates, DoD CIO Scorecard, escalation briefings, etc.)
• Provides technical expertise with systems engineering to ensure Information Assurance compliance and secure cyber posture with respect to availability, integrity, authentication, confidentiality, and non-repudiation. Assist with system design reviews and develop recommendations to secure and or mitigate the system architectures
• Experience with DISA Security Technical Implementation Guides (STIG), Assured Compliance Assessment Solution (ACAS), and other DoD cybersecurity tools
• Support the development and delivery of RFS proposals and/or Rough Orders Magnitude (ROMs) for initiatives as required
• Works with the program office engineer team to review proposed new design and or software upgrades to ensure any changes to the system doesn’t degraded system.
• Focal point for validating systems patching plan and design of security into the technical solution. Develop or modify implementation and design documents describing how security features are implemented.
• Conduct assessment of Identity Solution according to guidance from NIST as described in Special Publication 800-63

 

 

Qualifications

Minimum Qualifications:

Citizenship: Must be a U.S. Citizen

Clearance: Must have an active DoD Secret level security clearance, with the ability to obtain and maintain a Top Secret level security clearance

Certification: Hold a DoD 8570 Information Assurance Management Level II certification

Education: Associate’s degree in a related field 

Years of Experience: 10 years of experience in Systems Cybersecurity OR,

• Bachelor’s degree in a relevant field with 5 or more years of experience in Systems Cybersecurity

Additional Experience:

• Demonstrate excellent interpersonal skills, strong written, communication, oral presentation skills, and ability to lead group discussions.
• Ability to problem solve and troubleshoot various situations to develop successful outcomes within established program/project guidelines

Preferred Qualification:

Certification:

• DoD 8570 Information Assurance Management Level III certification 
• Hold or be actively pursuing security-related professional certifications within the GIAC family of certifications or CISSP, CISM or CISA
• If pursuing, must possess DoD 8570 IAM Level II certification (e.g. CompTIA Security + or equivalent per current DISA guidance: https://public.cyber.mil/wid/cwmp/dod-approved-8570-baseline-certifications/)

Additional Experience:

• Experience working with Static Code Analysis tools is preferred (e.g. Fortify).
• Experience with software development lifecycle tools (including vulnerability tracking software) is desired
• Working knowledge of architecture and design of solutions using cloud-based technologies or experience with Microsoft Azure, AWS, GPS or other cloud technologies
• Proficient with a variety of DevOps tools and techniques is preferred
• Knowledge of software development and systems development lifecycle practices, preferably in an agile development environment is preferred
• Hand-on experience in software security testing, methodologies, and frameworks
• Hands-on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc. (e.g. HBSS/Trellix, Windows Defense, etc.).
• Familiarity with web-related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols

Additional Information: 

Location:  Building 2025 at Peterson Space Force Base in Colorado Springs CO

Onsite, Hybrid or Remote: Hybrid. Currently 1-2 days remote for local candidates. (Subject to change at the customer's discretion)

Travel: This position will require you to travel 10-20% 

#LI-JK1 #hybrid

Company Overview

Odyssey Systems Consulting Group, is an innovative small business committed to providing world-class technical, management, and training support services to government and public sector clients. We focus on people, processes, and performance to deliver superior results. Since our inception in 1997, our commitment to mission success and customer satisfaction has been recognized with exponential growth and exceptional past performance ratings. We accept challenging assignments and drive projects from the planning stages, through implementation, and into operations and support.

 

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

Please Note:

Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.

 

This position is filled through continuous recruitment and will remain open until a sufficient pool of applications has been received.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, Tricare supplement, short-term disability, long-term disability, 401(k) match, flexible spending accounts, health savings accounts, employee assistance program, learning and development benefit, paid time off, and holidays.Odyssey Benefits