System Security Engineer (Cybersecurity)

Location: Cambridge, Massachusetts, United States; full-time onsite position.

Base salary: $62,500–$205,750 per year.

Company

hirify.global is an independent nonprofit research and development company delivering solutions for national security, defense, space exploration, biomedical engineering, and other critical challenges.

What you will do

• Develop, execute, and track security measures protecting information, network infrastructure, and computer systems.
• Design cybersecurity strategies and comprehensive system security architectures for critical and cyber-resilient technologies.
• Define, document, analyze, and validate system security, network security, and data security requirements.
• Configure, troubleshoot, and maintain security infrastructure; deploy monitoring software and detect irregular behavior, breaches, and intrusions.
• Develop and update information security strategies, define solutions for complex problems, and communicate execution risks to program leadership.
• Prepare technical reports and presentations, train staff in security best practices, and collaborate with multidisciplinary teams.

Requirements

• Bachelor's degree in Electrical Engineering, Computer Engineering, Mechanical Engineering, Systems Engineering, Applied Physics, or a related field; a master's degree is preferred.
• With a bachelor's degree: 3–5 years of experience as a System Security Engineer or in a relevant role. With a master's degree: 0–2 years of relevant experience.
• Unified expertise in system security, cybersecurity, and cryptography, including security concepts and design principles, resilient architecture, anomaly and contingency management, and cryptographic key management.
• Ability to solve complex, industry- and customer-driven problems, collaborate with multidisciplinary teams and leadership, communicate with non-technical personnel, and balance competing demands.
• Must obtain and maintain a government security clearance.

Nice to have

• Proficiency applying System Theoretic Process Analysis for Security (STPA-Sec).
• Experience with model-based systems engineering tools such as Cameo/MagicDraw, DOORS/DOORS NG, or Jama Connect for attack-surface modeling and impact and gap analysis.
• Knowledge of cryptography for weapon and space systems, cryptographic key management, Public Key Infrastructure (PKI), and the NSA Key Management Infrastructure.
• Experience documenting compliance with NIST SP 800-160, NIST CSF 2.0, DoD Cyber Tabletop Guide, NIST SP 800-57, NIST 800-53, RMF, MITRE ATT&CK, and DoD Instruction 3150.02.
• Experience integrating vulnerability remediation, risk mitigation, and incident response into systems engineering, and drafting innovative R&D proposals for commercial government sponsors.

Culture & Benefits

• Collaborative multidisciplinary R&D environment focused on national security and other critical applications.
• Programs supporting work-life balance and workplace flexibility.
• Employee clubs, health and finance workshops, off-site social events, and discounts at local museums and cultural activities.
• Inclusive workplace with equal opportunity and reasonable accommodation for individuals with disabilities.