What are the responsibilities and job description for the Senior Cyber Software Engineer position at Teledyne FLIR?
The cybersecurity software engineer will work on team projects supporting all aspects of obtaining and maintaining an ATO for a closed restricted network. This includes creating and updating documents, risk identification, risk mitigation, system updates, and system validation. This position includes involvement with the customer, security test teams, software development team, hardware development team, production sites, and subcontractors. Other responsibilities include planning, tracking, and meeting work commitments.
Primary Duties & Responsibilities:
- Creating and updating cybersecurity documents. Examples include but are not limited to:
- System security plan
- IA test plan
- Key and certificate management plan
- Ports and protocols list
- Software version description
- SBOM
- Accreditation boundary and network diagrams
- Risk identification - Perform threat modeling, vulnerability assessments, and risk analysis in compliance with relevant standards.
- Vulnerability scans
- Evaluating controls
- Published threats
- Testing and system reviews
- Risk mitigation
- Implementing controls
- Applying updates
- Reducing exposure (e.g., removing packages, closing ports)
- Identifying options to resolve or mitigate open risks. This could include integrating existing solutions, defining a custom solution, or developing a solution.
- System updates and validation
- Creating updated system images
- Verifying system operation after mitigation steps or image creation
- Support software verification and validation activities in accordance with cybersecurity assurance levels.
- Issue tracking using Jira
- Written communication (e.g., Jira, Confluence, documents, spreadsheets, presentations, email)
- Estimate scope and effort for a task
- Developing software in a larger integrated system
- Developing software in a team
- Apply troubleshooting techniques and overcome challenges
- Work on-site at a Teledyne office with access to project hardware
- Collaborate within a geographically disperse team
- Periodic travel for integration sessions at other sites and supporting build, test, or customer events
- Continual growth as tools and technologies advance
- Develop and maintain an understanding of the system and equipment that is controlled.
- Evaluate field installations and recommend design modifications to eliminate machine or system malfunctions.
- Interface with technical working group meetings to comply with requirements and specifications.
Required Job Qualifications:
- Must be a US Citizen
- Ability to obtain and maintain a secret clearance
- Must possess (or be able to obtain within six months of employment start date) a DoD 8570.01-M certification
- Minimum required: IAT Level 1 or equivalent certification
- Preferred: IAT Level 2 or equivalent (e.g., Security )
- Experience with RMF or DIACAP
- Expert problem-solving skills
- Excellent written and verbal communication skills
- Expert at Linux. Prefer Ubuntu 24.04 or newer
- Expert using command line
- Expert at system configuration
- Expert at network configuration (e.g., VLANs, routes, iptables/nftables)
- Expert working with packages
- Experience with Android
- Experience setting up time servers, DHCP servers, custom services
- Experience working from a remote console (e.g., ssh)
- Experience using Nessus Professional
- Experience using Clonezilla
- Experience reviewing and applying STIGs and SRGs
- Ability to develop detailed plans for a task, accurately estimate the effort, and track progress
- Ability to track issues/changes with or without an issue tracking system and generate a change log
- Ability to overcome challenges and make tradeoffs between an ideal solution and what is possible given project constraints
Preferred Job Qualifications:
- BS or MS degree in Computer Science or related field is preferred
- Minimum 5 years relevant experience in cybersecurity preferred
- Experience with Android for x86 OS
- Android x86, Bliss OS, Bass OS
- Experience with Yocto OS
- Experience with Docker containers
- Experience programing or scripting to automate tasks
- Experience with Bash scripting
- Experience with Cross Domain Solutions (CDS)
- Experience customizing secure boot/TPM for disk encryption
- Experience creating custom Clonezilla scripts
- Experience with Military Standard Software Development and Documentation (MIL-STD-498)
- Familiarity with Jira and Confluence tools.
- Previous experience with military / DoD programs.