Senior System Security Engineer

Overview:

Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation. For more information about Draper, visit www.draper.com.

Job Description Summary:

The Secure Solutions Group within the System’s Engineering Directorate is seeking a Senior System Security Engineer to support engineering, integrating, and deploying trustworthy secure platforms that resist cyber, reverse engineering, and supply chain threats. The group has multidisciplinary proficiencies in secure systems architecture, hardware security and resilience, software security and resilience, system validation and accreditation, and cryptography.

Specific responsibilities include the following:
• Work with cross disciplinary team of system, hardware, and software engineers to support program execution.
• Communicate with program members, program offices, and sponsors to present work to the technical and evaluation community.
• Bring a systems engineering prospective to support development system architectures for secure solutions.
• Support analysis of Draper, customer, and sponsor developed systems to evaluate effectiveness and suitability.

Job Description:

Duties/Responsibilities
• Develop, execute and track the performance of security measures to protect information and network infrastructure and computer systems.
• Design computer security strategy and engineer comprehensive cybersecurity architecture.
• Identify, define and document system security requirements and recommend solutions to management.
• Configure, troubleshoot and maintain security infrastructure software and hardware.
• Install software that monitors systems and networks for security breaches and intrusions.
• Monitor systems for irregular behavior and set up preventive measures.
• Plan, develop, implement and update company’s information security strategy.
• Educate and train staff on information system security best practices.
• Able to take ownership of assignments and guide others as needed; successfully lead tasks while tracking priorities, scope, cost and schedule.
• Derive plans and approaches to solving complex problems across a program lifecycle, capturing all assumptions and adapting appropriately to changes in requirements with limited direction.
• Independently contributes high quality content for technical reports and presentations which shows an understanding of their task and an awareness of the intended audience. Demonstrates both confidence and success when presenting technical information during meetings with internal and external stakeholders.
• Identify program/system-level technical risks and develop and execute mitigation strategies for them.
• Actively mentor less experienced engineers and provide thoughtful, constructive feedback

Skills/Abilities
• Curiosity-driven approach to solving complex, industry and customer-driven problems as part of a multi-disciplinary team.
• Collaborate and communicate effectively and openly with multi-disciplinary program team members. program leadership, and non-technical personnel
• Team player able to work in a fast-paced environment.
• Ability to balance multiple competing tasks and demands.

Education
Requires a bachelor's degree in Electrical Engineering, Computer Engineering, Mechanical Engineering, Systems Engineering, Applied Physics, or related field. Master's degree preferred.

Experience
• Bachelor's degree requires 5-10 years' experience of working on System Security Engineer or other relevant position.
• Master's degree requires 3-5 years' experience of working on System Security Engineer or other relevant position.

Additional Job Description:

Additional Qualifications:

• Proficiency in full life-cycle systems engineering (architecture, design, development, integration, approval, and deployment) of security technologies and components within cyber-physical systems and systems-of-systems
• Experience in the design and implementation of secured systems based on system requirements, design analysis, and consideration of external vectors
• Familiarity with processes and technologies for identification of critical program information and development of the associated program protectio