Senior Cybersecurity Assurance Engineer – NASA Jet Propulsion Laboratory – Pasadena, CA
About the job
New ideas are all around us, but only a few will change the world. That’s our focus at JPL. We ask the biggest questions, then search the universe for answers—literally. We build upon ideas that have guided generations, then share our discoveries to inspire generations to come. Your mission—your opportunity—is to seek out the answers that bring us one step closer. If you’re driven to discover, create, and inspire something that lasts a lifetime and beyond, you’re ready for JPL.
AsaCybersecurityAssuranceEngineer,youwillperformhigh-value CybersecurityEngineering; performing cybersecurity practices that assure JPL mission systems, functions, and data are sufficiently protected from cyber-attacks. You will provide missions with an in-depth view of their cybersecurity risk profile, with the goal of reducing cybersecurity risk throughout the mission life cycle. You will assess and lead efforts to improve mission cybersecurity infrastructure: the plans, processes, systems, and tools that support existing cybersecurity controls and enable new ones. You will seek out new tools and techniques that improve the performance of cybersecurity functions, reduce their impact on missions, and enable better cyber risk identification, analysis, and management throughout the mission life cycle. You will help strengthen cybersecurity practice at JPL and engage in collaborations with the cyber security research community, which includes other government agencies, academia and industry.
- Typically requires Bachelor’s degree in Cybersecurity, Computer Engineering, Computer Science, Mathematics, Aerospace Engineering or similar technical discipline with a minimum of 9 years of related experience, Master’s degree in similar disciplines with a minimum of 7 years of related experience, or PhD in similar disciplines with a minimum of 5 years of related experience that along with the following: requirements analysis, design, coding, configuration management, integration and testing.
- Strong experience in several of the following areas (NIST Special Publications (SP) 800 series (800-53 / 800-53a), Risk Management Framework (RMF), Cybersecurity Framework (CSF), Assessment & Authorization (A&A), Incident Response, Penetration Testing, Cybersecurity Architecture, Cybersecurity Risk Assessment, Cybersecurity Auditing, Security Operation Center, Static Analysis and Vulnerability Scanning Tools, TCP/IP networking principles and protocols, LINUX OS, Lightweight Directory Access Protocol (LDAP))
- Cybersecurity and Information Assurance Experience and Knowledge
- Experience in systems/software development
- Experience with Python or similar scripting language
- Excellent interpersonal, verbal and written communications skills.
- Must be a U.S. Citizen with the ability to obtain a TS/SCI Security Clearance
Desired Qualifications
- Experience in programming in the C, C++, or Java programming languages in a UNIX/Linux or real-time (e.g. VxWorks) operating system environment.
- Experience with software engineering tools such as Integrated Development Environments (IDEs), compilers, static analyzers, Magic Draw, UML/SysML, GIT, and JIRA.
- Knowledge of JPL flight project engineering culture
- Knowledge of secure coding practices
- Ability to work on major project assignments without appreciable direction, with accountability for technical performance and schedule
- Experience with modern systems and software development processes, as described in the Capability Maturity Model Integrated (CMMI).
- Familiar with Federal Information Processing Standards (FIPS)
- CISSP certification
- Risk Assessment Experience in context of JPL Flight and Ground Systems
- Active TS/SCI Security Clearance
