Director Offensive Security Engineer Jobs in Michigan

System Security Engineer (SSE) will provide technical support to formally register Department of Defense (DoD) acquisition programs with their applicable cybersecurity program(s).  SSE will assist in conducting trade-off analyses and will integrate contributions from system security engineering disciplines such as anti-tamper, cybersecurity, exportability features, hardware assurance, software assurance, supply chain risk management, and security specialties (personnel security, industrial security, physical security, etc.)

Essential Job Functions:

Responsible for ensuring the development and delivery of cybersecurity and program protection capability for DoD acquisition programs through the implementation of an approach based on cost, schedule, performance, and risk.

Lead the evaluation and balancing of security contributions to produce a coherent security capability across the technology system and the DoD acquisition program, in order to integrate all aspects of system security. 

Assist in conducting trade-off analyses and will integrate contributions from system security engineering disciplines such as anti-tamper, cybersecurity, exportability features, hardware assurance, software assurance, supply chain risk management; and security specialties (personnel security, industrial security, physical security, etc.). 

Focus on Cyber survivability to assess the ability of the system to perform its mission and functions, in the face of cyber-attack, by the anticipated adversaries, and to operate effectively in a cyber-contested environment. 

The outcome of the SSE’s efforts will be a comprehensive program and system protection strategy within the constraints of cost, schedule, and performance while maintaining an acceptable level of risk.   The SSE will be responsible for authoring and updating the program protection plan (PPP) document.

Some of the specific tasks will involve the following:

Provide a program protection assessment of requirements documents to program management.

Identify critical program information (CPI) including inherited designated science and technology information.

Determine vulnerabilities and threats to CPI.

Identify personnel required to fulfill all pertinent program protection roles to engineering and program management.

Perform risk analysis.

Recommend appropriate security controls for an acquisition program.

Provide technical support to register an acquisition program with the applicable component(s) cybersecurity program.

Document program protection planning in the systems engineering plan (SEP), PPP and system security plan (SSP).

Less than 5% travel is anticipated.

Required Skills:

Due to the sensitivity of customer related requirements, U.S. Citizenship is required.

Must be able to obtain and maintain a DoD Secret clearance.

Bachelor Degree in an engineering discipline or Cybersecurity, plus at least 12 years’ experience, with at least 5 of those being specifically focused on cybersecurity.

Understanding of systems engineering processes.

Experience or training in some or all of the following: supply chain risk management, anti-tamper, SBOMs, CPI, criticality analysis, and PPPs.

Self-starter with the ability to work without direct supervision.

Ability to work within a team context.

Ability to daily provide high quality support and customer service to the Government customer in a high visibility position.

Excellent written and verbal communications skills.

Strong interpersonal abilities, including ability to tactfully negotiate resolution to competing programmatic demands and requirements.

Strong customer service mentality.

This position is at a client site in Warren, Michigan, and candidates must be willing to perform the duties of this job on-site on a full-time basis.

Desired Skills:

CISSP-ISSEP certification.

Bachelor Degree in computer science, computer engineering, or electrical engineering.

20+ years of experience working in the arena of cybersecurity.

Experience mitigating cyber and program risk through supply chain management.

Familiarity with AR70-77 and NIST 800.160 pertaining to "Technology and Program Protection."

Experience working in systems engineering.