System Security Engineer / Cybersecurity Engineer / Program Protection
Job Overview
SparQ is seeking an experienced System Security Engineer / Cybersecurity Engineer to support the U.S. Coast Guard (USCG) on site 3 days a week in integrating Cybersecurity and Program Protection activities into Coast Guard acquisition policies, programs, and systems. This role is embedded within the USCG acquisition enterprise and works directly with government stakeholders to ensure that cybersecurity and program protection principles are built into acquisition programs from inception through sustainment.
This is a high impact position for a senior professional with deep expertise in acquisition cybersecurity, system security engineering, and program protection and a track record of delivering results in complex federal environments.
Responsibilities
System Security Engineering & Program Protection
Develop and manage acquisition support activities to integrate Cybersecurity and Program Protection into Coast Guard acquisition policies and lifecycle processes
Define Cybersecurity and Program Protection stakeholder objectives, needs, concerns, security requirements, and associated validation methods
Define system security requirements and associated verification methods; develop security views and viewpoint requirements for system architecture and design
Identify and assess vulnerabilities and susceptibilities to lifecycle disruptions, hazards, and threats across acquisition programs
Develop and manage Cybersecurity and Program Protection guides and acquisition document templates
Develop processes to conduct Critical Program Information (CPI) analysis and Criticality Analysis (CA) to identify CPI, Critical Functions (CF), and Critical Components (CC) as part of developing comprehensive Program Protection Plans (PPPs)
Provide security considerations to inform systems engineering efforts and reduce errors, flaws, and weaknesses that may constitute security vulnerabilities
Identify, quantify, and evaluate costs and benefits of security functions to inform analysis of alternatives, engineering trade-offs, and risk management
Demonstrate through evidence-based reasoning that security claims for the system have been satisfied
Leverage multiple security and other specialties to address feasible solutions for delivering trustworthy, secure systems
Acquisition Document Review & Policy Support
Review and provide actionable feedback on Cybersecurity and Program Protection-related acquisition program documents and external policies, including:
USCG Acquisition Cybersecurity Strategy (ACSP)
USCG Acquisition Program Protection Plan (PPP)
USCG Risk Assessment Report (RAR)
USCG Cybersecurity Risk management documentation
Support the development and revision of USCG acquisition cybersecurity policies on an as-needed basis
Required
Bachelor’s Degree in Information Technology, Cybersecurity, Systems Engineering, Computer Science, or a related field
10+ years of Information Technology (IT)-related experience, including 3+ years in a management or supervisory capacity and 3+ years of direct experience in cybersecurity, program protection, or acquisition security
Active Secret security clearance at time of hire
Demonstrated experience supporting DoD or DHS acquisition programs, including integration of cybersecurity and program protection into the acquisition lifecycle
Working knowledge of Program Protection Plans (PPPs), Critical Program Information (CPI) analysis, Criticality Analysis (CA), and related program protection frameworks
Ability to identify and assess adversary threats, vulnerabilities, and lifecycle risk to acquisition programs
Strong written and oral communication skills, including the ability to draft technical reports and deliver briefings to senior government officials
Preferred
Masters Degree
Prior USCG or DHS acquisition support experience
Familiarity with USCG acquisition policies and processes (e.g., ACSP, PPP, RAR)
Experience with Supply Chain Risk Management (SCRM) and Program Protection Plans
Experience supporting programs at DHS, USCG, DoD, or other federal civilian agencies with acquisition cybersecurity mandates
Pay: $120,000.00 - $140,000.00 per year
Work Location: Hybrid remote in Washington, DC 20032