
network security engineer Simi Valley, CA
Job description
Job Description
Summary
- Evaluate the technical aspects of security vulnerabilities and shepherd AV product teams through the product cybersecurity process.
- Responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate, and verify life-cycle information system security solutions.
- Define PSE tool, process, and mission requirements and institute in company policy and programs.
- Approval authority for missions, including any necessary waivers. Active participant in program development relating to product cybersecurity.
- Embedded Product Security Engineer in necessary programs/projects for Systems, Hardware, and SW to ensure PSE tools, requirements, and processes are implemented in architecture, process, sourcing/component selection, production, and overall product development.
- Working across the company you will leverage your organization abilities, technical acumen, and communication skills to advise product teams on the impact of security vulnerabilities and help them establish the best course of action to remediate the affected AV products.
- Define and lead the transformation of AV product cybersecurity into a world class industry recognized model of excellence and efficiency.
- Able to anticipate critical situations and to proactively plan tactical and strategic response to a product security issue.
- The successful candidates will be responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate, and verify lifecycle balanced cybersecurity robustness, global process, and certification for new products being designed and legacy products while preserving their necessary utility and useability.
- Correctly interpret and implement appropriate Accreditation and Authorization activities per DoD RMF, NISPOM, and other government publications for company products as required by customers while maintaining functionality.
- Ability to deploy, configure, and operate cybersecurity tools such as vulnerability scanners, Security Content Automation Protocol (SCAP) Compliance Checker (SCC), Antivirus/Anti Malware applications, and SIEMs.
- Coordinates with hardware, network, production, and software engineers, test and validation engineers, manufacturing, operations, and logistics personnel, and program management on security related activities and requirements.
- Interpret system requirements and provide subject matter expertise to program management and customers.
- Perform security evaluation and testing of company hardware, software, and documentation products, and document findings in reports and briefings.
- Ensure system and interface requirements support cybersecurity needs
- Prepare test cases, test scripts, test plans and procedures, data collection, and lab infrastructure for cybersecurity functions.
- Participate in system and project development, integration activities, and working groups.
- Apply a logical approach in solving challenging problems
- Troubleshoot Android, Linux, Windows, and RTOS based systems as well as networking and/or storage technologies for security related issues.
- Develop patch and security upgrade management solutions for Android, Linux, and MS Windows, and RTOS based systems with centralized and de-centralized management infrastructure.
- Develop centralized and de-centralized infrastructure and processes for managing cybersecurity related software updates.
- Ability to work effectively in situations involving uncertainty or lack of information and respond favorably to change.
- Ability to "think on your feet" and react decisively in an unstructured environment
- Be able to learn and understand new products and technologies quickly.
- Strong oral and written communication skills with demonstrated attention to detail and results orientation.
- Possess or be able to obtain DoD Security clearance at Secret level or higher.
- Bachelor of Science degree in an Engineering discipline with a minimum of 8 years of relevant experience or a master’s degree in an Engineering discipline with a minimum of 6 years’ relevant experience in the following:
- Driving processes and systems to support the success of product security projects.
- Demonstrated technical leadership across a matrixed organizational structure to establish plans and deliver high quality results on time.
- Familiarity with ongoing security research against products and infrastructure and ability to apply that knowledge to product security incident response.
- Familiarity with Cybersecurity features, vulnerabilities, and solutions for integrated hardware/software systems with emphasis on Android, Linux, Windows, and RTOS based enterprise and embedded systems.
- Familiarity with RTCA DO-326/ED-202, DO-178, NIST (SP) 800-160, 800-53, FIPS 140-2, DoD RMF, or DoD aviation cybersecurity requirements is ideal.
- 10 years’ work experience in field of product cybersecurity design at board or box level.
- U.S. Citizen
- Travel required
- Work under minimal supervision
- Practical experience in information security and/or product security preferred.
- Security certifications like ISM, CISSP, GIAC, GCIA, CISM. etc. is desired
- Experience architecting unmanned systems for cybersecurity.
- Ability to work in an office and manufacturing environment (Constant)
- Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent)
- Requires frequent travel to support working with suppliers, resolving product issues, participating in system tests, and supporting customers
