Description
System Security Engineer with focus on Processes and Standards.
Systems security engineering includes a combination of technical and nontechnical activities. These activities are based on foundational security concepts, principles, and best practices and are intended to provide substantiated confidence that protective measures function only as specified, enforce security policy, produce the desired outcome, and warrant the trustworthiness required by stakeholders. Systems security engineering activities are intended to be performed throughout every stage of the system life cycle. Systems security engineering views security: (i) as a protection capability that satisfies security requirements and is delivered as part of the system; and (ii) as a quality property of the entire delivered system when it is properly configured and used to enforce the security policy associated with mission/business operations. It is the need to satisfy security requirements and to enforce a security policy that differentiates systems security engineering from other systems engineering specialties. A sufficiently trustworthy system results from adherence to the security concepts, principles, and practices in the application of security specific methods, techniques, and analyses, some of which stand alone and others that supplement existing systems engineering techniques, methods, and analyses.
- The consultant we are looking for does not have a hands-on role, but is much more responsible for defining the processes.
- The consultant should be able to make the processes and standards understandable for the developers.
- The consultant could have a developer/engineer background, and have moved on to being an expert on Security.
- It's an absolute plus if the consultant has experience with RTCA DO-178C, 326A, 355, 356, NIST standards, ISO/IEC 20000, 27000, 15408, etc.
- Knowledge of Quality Assurance - QA
- Big plus if the consultant has been working within Aerospace or Medico with either products or processes
English is the only language required for this role.