Senior Staff Engineer, System Security (R6509)

The role

This role applies the DoD Risk Management Framework to embedded cybersecurity for aerospace and defense systems. The work includes threat modeling, vulnerability assessments, and building the evidence and documentation needed to achieve an Authorization to Operate (ATO) with government customers.

What you will do

• Carry out the DoD RMF process and develop the evidence needed to achieve the ATO.
• Define the embedded cybersecurity architecture, requirements, models, documentation, and trade studies.
• Perform threat modeling, attack-surface analysis, vulnerability assessments, and cyber risk assessments.
• Develop the program's AT artifacts and documentation to support government approval of the AT plan.
• Plan and execute the cybersecurity implementation and verification.
• Coordinate between internal teams, stakeholders, suppliers, and customers to communicate and integrate the cybersecurity solution.

Required qualifications

• Bachelor's degree in computer engineering, electrical engineering, software engineering, systems engineering, or a related STEM field, plus at least 8 years of related experience.
• Experience with the systems engineering process of developing embedded cybersecurity solutions in aerospace and defense systems.
• Experience with threat modeling, secure system architecture, vulnerability analysis, and security testing.
• Familiarity with NIST SP 800-53 and NIST SP 800-160 volumes 1 and 2.
• Strong technical leadership, writing, and customer communication skills.
• Active Secret security clearance with ability to obtain special access.

Nice to have

• Knowledge of avionics, mission systems, platform networks, communications, or data links.
• Experience with Anti-Tamper, Critical Program Information (CPI) assessments, Key Management Plans, Supply Chain Risk Management, Software Assurance, or Cross Domain Solutions.
• Hands-on experience with penetration testing or adversarial assessments.
• CISSP certification.

Benefits

• Equity for full-time regular employees.
• Bonus for full-time regular employees.
• Benefits for full-time regular employees.
• Temporary benefits package for temporary employees, applicable after 60 days of employment.

Before you apply

• An active Secret security clearance is required, with ability to obtain special access.
• All offers are contingent on a cleared background and possible reference check.
• Military fellows and part-time employees are not eligible for benefits.

About the company

Shield AI is a venture-backed defense-tech company that builds intelligent systems to protect service members and civilians. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation technologies.