Product Security Analyst responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify lifecycle balanced information system security solutions.
Implement cybersecurity features on program systems and implement RMF processes for embedded computing systems.
Evaluates customer/operational needs to define and coordinate system security requirements, integrate technical parameters and assure compatibility of all physical, functional and program interfaces.
Performs various analyses to optimize total system of systems and/or system architecture.
Identifies assets and assesses risks, threats, and vulnerabilities of the product assets in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, non-repudiation and contract compliance.
Evaluates remediation recommendations and develops a cost to mitigate estimate.
Employs system security processes, methods, and tools and assures their consistent application.
Resolves cross-functional technical issues.
Implements appropriate Accreditation and Authorization (A&A) activities per ICD 503 RMF, NISPOM, or DoD Overprint to the NISPOM as required by customers.
Coordinates with system administrators, network and software engineers, test and validation engineers and program management on security related activities and requirements.
Travel (25%) will be required for meetings with customers, internal meetings, etc.
Works under minimal direction.
Requirements
Bachelor and typically 6 or more years of work related experience or Masters and typically 4 or more years of work related experience; ten (10) or more years of directly related experience in lieu of a degree is acceptable.
DoD 8570 IAT Level II Certification.
Experience with Information Systems Security is required.
Active U.S. TS/SCI Security Clearance is required pre-start.