Senior Cyber Architect

M9 Solutions is seeking a Senior Cyber Architect to work on a government contract for a client located in San Diego, CA. An active TS/SCI clearance is required.     

Responsibilities

• Lead systems engineering teams.
• Lead Assessment and Authorization (A&A) activities for systems in accordance with the Risk Management Framework.
• Support traditional systems engineering tasks such as requirements development and allocation, cyber design engineering, cyber implementation engineering, verification and validation, and continuous monitoring efforts during deployment, operations and sustainment.
• Support offensive architecture analysis and design of defense-in-depth solutions.
• Support Development Security Operations (DevSecOps) integration.
• Develop and assess system security plans, including security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestones.
• Conduct and analyze vulnerability assessments to validate system compliance.
• Analyze static code scans and dynamic code scans for compliance.
• This position may require business travel to customer locations in support of client and customer meetings, product demonstrations, integration, and/or systems testing.

Required Skills and Qualifications

• Active TS/SCI security clearance.
• Bachelor’s degree in a Cyber, Systems, Software, Electrical, Mechanical, or similarly related engineering/technical discipline, and 6+ years of related experience or equivalent experience, training, and/or certifications.
• ISC2 CISSP or equivalent certification.
• Strong engineering skills, interpersonal skills, and the ability to effectively build and lead teams.
• Extensive experience with traditional A&A tools: ACAS Nessus, SCAP Scanner, STIG Viewer.
• Demonstrated expertise in national cybersecurity policies and industry best practices on complex systems.
• Expertise in vulnerability assessment, control allocation, and risk mitigation.

Preferred Skills and Qualifications

• Other cyber certifications such as CISSP-ISSAP, CISSP-ISSEP, CCSP, CEH, OSCP, etc.
• Understanding of offensive security tactics, techniques, and procedures.
• Experience with Cyber Failure Mode, Effects, and Criticality Analysis (FMECA).
• Experience writing proposals with innovative, cost-effective solutions.
• Experience with offensive architecting, threat modeling, and attack vector analysis.
• Experience with cloud and cross-domain solution accreditations.
• Ability to negotiate effectively with higher-level managers, functional managers, customers, industry partners, and teammates.
• Demonstrated leadership skills (supervisory experience, building teams, building customer relationships).
• Working knowledge of Earned Value Management System (EVMS) systems and Project management tools such as Cost Performance Index (CPI) and Integrated Master Schedule (IMS).
• Experience with leading and coordinating security test events to achieve accreditation milestones.
• Experience with verifying and validating vulnerability resolutions and/or mitigations.
• Experience with supporting proposal and cost estimate activities.
• Experience with Attack and Threat modeling.
• Strong mentoring skills.
• Good planning and organizational skills.
• Strong oral and written communication skills.