Distinguished System Security Engineer

Overview:

Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation. For more information about Draper, visit www.draper.com.

Job Description Summary:

The High Availability Architecture Group within the Systems Engineering directorate is seeking a Distinguished System Security Engineer to guide and facilitate concept development, mission-system analysis, and requirement definition & compliance for critical, yet novel & disruptive cyber resilient technologies. This handpicked candidate must possess a unified System Security, Cybersecurity, and Cryptography expertise that can expand Draper’s insight to address national security threats which remain prevalent throughout critical enterprises, infrastructure, systems, and operations.

A successful candidate will be equipped to propose modern solutions embedded with security awareness, that adhere to NIST, NSA, and DoD standards, to proactively mitigate unacceptable loss and unrecoverable downtime throughout their lifecycle. The multidisciplinary proficiencies supporting this initiative are System Security Concepts & Design Principles, Resilient Architecture, Anomaly & Contingency Management, and Cryptography & Key Management.

Job Description:

Duties/Responsibilities
• Manage and control priorities, scope, schedule, and cost to baselines by proactively monitoring program/task performance across major programs. Demonstrated leadership of complex tasks (multi-disciplinary, high risk, changing requirements, high visibility).
develops and executes mitigation strategies for them.
• Independently derive system-level requirements based on mission requirements and customer priorities.
• Capable of helping customers shape their needs and develop requirements for programs that solve their most challenging technical problems.
• Subject Matter Expert (SME) able to develop and implement novel security approaches through a program lifecycle.
• Advance State of the Art solutions and techniques in their field.
• Able to analyze Draper strategy and work with management to build capability in key areas to help sustain business growth

Skills/Abilities
• Curiosity-driven approach to solving complex, industry and customer-driven problems as part of a multi-disciplinary team.
• Collaborate and communicate effectively and openly with multi-disciplinary program team members. program leadership, and non-technical personnel
• Team player able to work in a fast-paced environment.
• Ability to balance multiple competing tasks and demands.

Education
Requires a bachelor's degree in Electrical Engineering, Computer Engineering, Mechanical Engineering, Systems Engineering, Applied Physics, or related field. Master's degree preferred.

Experience
Requires 10-15 years' of experience working on System Security Engineer or other relevant position.

Additional Job Description:

• Proficiency applying System Theoretic Process Analysis for Security (STPA-Sec) to industry challenge problems
• Proficiency with Model-based System Engineering toolkits, such as Cameo/MagicDraw, DOORs/DoorsNG, Jama Connect for the purposes of attack surface modeling and rapid impact & gap analysis for validation
• An astute understanding of the applications of cryptography for complex weapon and space systems, cryptographic key management, Public Key Infrastructure (PKI) and the NSA’s Key Management Infrastructure
• Experience documenting compliance towards parent specifications and standards (i.e.: NIST SP 800.160, NIST Cybersecurity Framework (CSF) 2.0, DoD Cyber Tabletop Guide, NIST SP 800-57, NIST 800.53 & Risk Management Framework (RMF), MITRE Attack Framework, and DoD Instruction 3150.02)
• Proficiency in requirement derivation, definition, and analysis for System Security, Network Security, and Data Security needs
• Experience integrating vulnerability remediation, risk mitigation, and incident response within the Systems Engineering process.
• Experience drafting innovative R&D proposals to commercial government sponsors

Applicants selected for this position will be required to obtain and maintain a government security Government