Information System Security Engineer

The Security Services Department’s overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, and sabotage; and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies.

 

We foster a diverse and inclusive culture where security professionals from a wide range of backgrounds are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Services Department encourages flexible schedules and hybrid remote work arrangements.

Who are we?

MIT Lincoln Laboratory is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security.

* Mission - The Security Services Department’s (SSD) overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of national security, including guarding against compromise by foreign intelligence agencies and insider threats.
* Culture – We foster an inclusive, opportunity-filled environment of empowered team members from diverse backgrounds.

 

What will you do?

The ISSE will design, develop, test, integrate and evaluate information system security throughout the system’s development life cycle. The ISSE ensures that all security requirements, necessary to protect the organization’s mission and business processes, are adequately addressed in all aspects of architecture including reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes. Core responsibilities include:

* Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
* Translate proposed capabilities into technical requirements.
* Determine level of assurance of developed capabilities based on test results.
* Develop test plans to address specifications and requirements.
* Install and maintain network infrastructure device operating system software (e.g., IOS, firmware).
* Make recommendations based on test results.
* Determine scope, infrastructure, resources, and data sample size to ensure system requirements are adequately demonstrated.
* Create auditable evidence of security measures.
* Validate specifications and requirements for testability.
* Analyze the results of software, hardware, or interoperability testing.
* Perform developmental testing on systems under development.
* Perform interoperability testing on systems exchanging electronic information with other systems.
* Perform operational testing.
* Test, evaluate, and verify hardware and/or software to determine compliance with defined specifications and requirements.
* Record and manage test data.
* Conduct risk analysis, feasibility study, and/or trade-off analysis to develop, document, and refine functional requirements and specifications.
* Design and document quality standards.
* Define baseline security requirements in accordance with applicable guidelines.

How will you grow?

You will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, thrive and belong.
* Leadership: Room to advance on your team or to lead cross-functional projects.
* Growth Opportunities: Potential for lateral and vertical movement.
* Education/Training: Management training, mentorship, in-house and external courses.
* Exposure: Engagement with sponsors, stakeholders, Laboratory leadership and other Departments and Divisions.
* Community: Participation is encouraged for Laboratory social events, Employee Resource Groups (ERGs), clubs and study groups, volunteering and community service projects.

What you need:

To work with MITLL, all employees must meet certain basic requirements.
* Must be a U.S. Citizen.
* Successfully pass a background check.
* Valid COVID-19 vaccination (to include a booster shot).
* Possess a current in scope To