Human Exploration and Spaceflight Information Systems Security Engineer

The Aerospace Corporation is the trusted partner to the nation’s space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space— delivering innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you’ll be part of a special collection of problem solvers, thought leaders, and innovators. Join us and take your place in space.

Building on The Aerospace Corporation's reputation as a trusted, impartial advisor with integrity and dedication to mission success, the Civil Systems Group (CSG) combines deep technical expertise with market-leading innovation to help our customers solve complex systems engineering and integration challenges. CSG is organized by core customer-facing lines of business to manage and grow programs within NASA, NOAA, and the NNSA, while extending our capabilities to other civilian federal government agencies fully integrated within Aerospace rules, regulations, processes, values, and behaviors.

Within the CSG, the Human Exploration and Space Flight (HESF) Division supports our NASA customer in all aspects of human space flight. We are looking for a Human Exploration and Spaceflight Information Systems Security Engineer (Project Engineer/Sr. Project Engineer - Technical Project Management). The primary function of this position is to ensure systems supporting the Extravehicular Activity (EVA) and Human Surface Mobility Program (EHP) office are secure and well-integrated, addressing the vast IT security needs across the EHP portfolio and Artemis missions. As the information systems security engineer representing Aerospace on this NASA team, you will shape from a systems engineering perspective the IT security requirements and implementation/maintenance approach for EHP and their respective projects including the Lunar Terrain Vehicle, Pressurized Rover, and Suits. 

Work Model

This is a full-time 100% remote position.

What You’ll Be Doing

• Provide systems engineering expertise to ensure IT System security across EHP systems 
• Serve as an Information Systems Security Engineer (ISSE) for EHP 
• Work with stakeholders to ensure that security objectives, protection needs and concerns, assurance needs, security requirements (including measures of effectiveness [MOEs] and measures of performance [MOPs]), and associated validation methods are defined 
• Use predefined framework to define system security requirements and associated verification methods 
• Develop security views and viewpoints of the system architecture and design 
• Identify and assess susceptibilities and vulnerabilities to life cycle hazards and adversities 
• Design preemptive and reactive features and functions included within a balanced strategy to control asset loss and associated loss consequences 
• Provide security considerations to inform systems engineering efforts to reduce errors, flaws, and weaknesses that may constitute a security vulnerability 
• Perform system security analyses and interprets the results of other system analyses in support of decision-making for engineering trades and risk management 
• Identify, quantify, and evaluate the costs and benefits of security features, functions, and considerations to inform assessments of alternative solutions, engineering trade-offs, and risk treatment decisions 
• Demonstrate through evidence-based reasoning that security and trustworthiness claims for the system have been satisfied to the desired level of assurance 
• Leverage security and other specialties to address all feasible solutions 
• Assist in the development and maintenance of system security plan (ex: the EHP Facilities plan) 
• Review and provide input to EHP facilities and supplier system security plans 
• Assess risk-based decisions and Plan of Actions and Milestones (POA&M) in the Risk Information Security Compliance System (RICS) 
• Review and update the EHP Contingency Plan based on the annual test and exercise results 
• Support an annual assessment by a third party 
• Provide oversight and recommendations for Access Control implementation 

What You Need to be Successful

Minimum Requirements for the Project Engineer - Technical Project Management

• Bachelor’s degree in an engineering, science, or another related STEM discipline  
• At least 6 years of systems engineering experience with IT systems 
• Minimum 5 years of experience with application and tool development 
• Minimum 3 years of experience with cloud infrastructure and containerization <