SYSTEMS SECURITY ENGINEER ( Santa Barbara, CA )
211722
Direct Hire Opportunity
Salary Plus Benefits
Relocation Assistance Available
We are looking for a Security Systems Engineer to integrate
embedded systems products to perform assessments and provide
design/architectural guidance with the goal of eliminating and/or
mitigating cyber vulnerabilities.
Here’s what you’ll be working on day to
day:
· Design, develop, implement, and monitor an auditable set of
life cycle processes to assess, document, any/all cyber security
requirements for software/embedded systems within products
· Vulnerability Analysis to identify and document potential
cyber vulnerabilities including logic/coding flaws, inter-device
communication weaknesses, and potential hidden or “backdoor” entry
points
· Gather and organize technical information from customer
requirements/needs regarding cyber security including the products’
mission, goals and needs
· Perform risk assessment and analysis of embedded
systems/applications within products from concept through product
end-of-life
· Identify current and emerging embedded system products
technology issues, including security trends, vulnerabilities, and
threats
· Pro-actively identify, recommend, and implement new cyber
security solutions and strategies to resolve/mitigate any cyber
security issues and protect embedded systems products
Here’s what you’ll need to bring with
you:
· Demonstrated working experience/skill in critical thinking
and real time problem solving
· Minimum 5 years of experience developing secure embedded
code within a structured system development life cycle (SDLC)
· Coding skills/Environments: Linux, RTOS, C, C++, Java
· Experience with vulnerability assessment tools such as
Coverity, HP Fortify, Veracode, Black Duck, etc.
· Strong awareness of cybersecurity trends and hacking
techniques
· Thorough understanding of the latest security principles,
techniques, and
· Experience with network security, networking technologies,
and network monitoring tools
· Knowledge of networking protocols, such as TCP/IP
· Experience with device communication protocols such as I2C,
SPI, 1553, CANBus, etc., is desirable
· Industry Certification(s) desirable, i.e., Certified Secure
Software Lifecycle Professional, Certified Information Systems
Security Professional, Global Information Assurance Cert.,
Certified Ethical Hacker, Certified Information Security Manager
(CSSLP, CISSP, GICSP, GSEC, CEH or CISM)
· Ability to access US export-controlled documentation
