Product Security Engineer

Job Description:

Saab, Inc. is currently looking for motivated, creative, inquisitive, and talented Lead Product Information Security Engineer. As the Lead Product Information Security Engineer, you will lead other information security engineers as part of the product development team to enhance the security posture of Saab solutions by applying your expertise and knowledge in systems, networking, and information assurance to proposal capture efforts, product implementation, and assessment.

The Lead Product Information Security Engineer is a multi-disciplined engineer who develops product security requirements and designs, selects and actively implements security controls, and performs compliance assessments. You will assist in capture efforts by writing proposal responses and preparing estimates for the security discipline.    

You will actively participate in the analysis, creation, and implementation of product security requirements, including automated control implementation and security updates. Your role will be responsible for demonstrating compliance to customer security objectives by mapping product attributes to customer security related requirements and development processes to prescribed standards (e.g. ISO 27001, NIST SP 800-37).

You will assist internal product groups composed of multi-disciplined engineers in assessing product security gaps, developing product requirements, risk mitigation strategies and documenting compliance to product security requirements.

The ideal candidate will have some scripting experience (Ansible preferred), Linux knowledge, and exposure to requirements management.

Compensation Range: $99,100 - $128,800

The compensation range provided is a general guideline. When extending an offer, Saab, Inc. considers factors including (but not limited to) the role and associated responsibilities, location, and market and business considerations, as well as the candidate's work experience, key skills, and education/training.

Skills and Experience:

• Strong Linux and Windows knowledge and command line skills

• Understanding of Operating System (Linux & Windows) hardening procedures and impact on operation

• Experience with requirements management tools (e.g. DOORS, Codebeamer)

• Working knowledge of Networking Security technologies and solutions (Firewalls, IDS, Routing, Switching)

• Experience with vulnerability assessment, penetration testing, risk assessments and associated tools

• Knowledge of domain standards (e.g. ISO 27001, ICAO 9985) and how to apply them to product development and the support of operational systems

• Experience working with demanding cyber-aware customers, listening to and understanding requirements, developing solutions to meet their needs, presenting solutions, and accommodating feedback.

• 10+ years experience with NIST, RMF and FISMA frameworks, 7 of those in a corporate environment.

• Possess a DoD 8570 IAT III or IAM II level certification or equivalent industry certifications: CISSP, CASP+ CE, CCNP Security, CISA, GCED, GCIH, CCSOP, CISM, GSLC, CCISO

• Experience in domain where Safety is also a concern (e.g. Aviation, Automotive, Nuclear) is a plus.

• Understanding of Secure Coding Principles and experience with Java, C, or C++ programming are a plus

• Bachelor of Science in Computer Science, Computer Engineering, Software Engineering, or Systems Engineering. Bachelor of Science degrees related to Information or Cyber Security with an emphasis or minor in Computer Science would also be considered.

At Saab, Inc., we constantly look ahead and push boundaries of what is considered technically possible. We collaborate with colleagues around the world who all share our challenge – to make the world a safer place.

Aviation stakeholders face a greater number of challenges and more complex demands than ever before. At Saab Safety and Efficiency, we continually find new ways to address the challenges faced by Air Navigation Service Providers (ANSPs) to enable safe, predictable, and efficient operations. We go beyond existing solutions, pioneering new ideas and helping to set industry standards.

Saab’s expertise spans operations, surveillance sensors, ATC automation, collaborative decision making, and digital towers. Our solutions are trusted by ANSPs, airports and airlines at over 100 locations in more than 45 countries. As