High Assurance Engineer

The High Assurance Engineer (HAE) will be responsible for those components and services of the program, which are determined to require high assurance.

The Program Manager / Chief Scientist / Engineer will provide overall guidance to manage the iterative process to design, develop, integrate, test, certify and field the program's components to the local technical lead. The successful candidate will respond to the local technical lead. This person will also be responsible for the detailed design and implementation of the high assurance components, prototyping and testing, and supporting the evaluation process. In this capacity, the HAE will be responsible for resource allocations and scheduling to develop, review and deliver the various components, processes, documents, and tests required and will act as either a team leader or a team member on the development teams. The successful candidate must possess skills in computer and security engineering education, specialized experience in web-enabled enterprises and services, and experience in the management of system design, integration, testing and fielding, of high assurance components.

Expert knowledge is required in the following topics:
.Formal Methods
.High Assurance Engineering and Platforms
.Engineering Assurance Levels
.Trusted Computing Base and Target of Evaluation
.Cryptography and encryption tools, especially Type 1 Cryptographic Systems
.Theoretical underpinnings of computer security
.Core Internet protocols (TCP/IP, UDP, BGP, DNS, SMTP, etc.)
.Core service oriented architecture protocols and languages (XML, SOAP, WSDL, SAML, etc,)
.Functional Programming languages and methods
.Operation and limitations of technologies used to ensure authorization, authentication, integrity and non-repudiation
.Operation and limitations of technologies used to establish and maintain secure sessions for individual operators and extending to multiple operators in collaboration sessions
.Vulnerabilities in Internet protocols and services susceptible to attack by sophisticated information warfare agents
.Operational details of multiple operating systems and security extensions
.Programming experience in multiple languages and using formal languages and methods
.Understanding of the Multiple Independent Levels of Safety / Security (MILS) architecture
.Understanding of High Assurance Platform (HAP) engineering.

In-depth knowledge or familiarity with most or all of the following topics is required:
.Key network security defenses, such as firewalls, intrusion detection systems, proxies, scanners, and encryption
.Iterative software development processes
.Kernels and micro-kernels enabling high assurance computer systems
.Light weight appliances, co-processors, and other computer hardware or firmware devices
.Web-based security tools
.Best practices for secure code development
.Computer systems and Internet security issues
.Computer security forensics
.Extracting security information from network monitoring tools/applications
.Software engineering
.Published papers or documents and formal presentations in several of the following topic areas are highly desirable:
. Trusted Computing
. Establishing secure Internet Sessions
. Discovering vulnerabilities in software
. Secure programming practices
. High Assurance in computing systems
. Attaining Multi-Level Security in web-based systems
. Published papers or documents and formal presentations in several of the following topic areas are highly desirable:
. Trusted Computing
. Establishing secure Internet Sessions
. Discovering vulnerabilities in software
. Secure programming practices
. High Assurance in computing systems
. Attaining Multi-Level Security in web-based systems

Experience/Skills
See Description.

BS in Computer Science or related field with 10 years og experience or MS in Computer Science or related field with 8 or more years experience or PhD with 6 years of related experience.

Other desired skills:
See Description.

BS in Computer Science or related field with 10 years og experience or MS in Computer Science or related field with 8 or more years experience or PhD with 6 years of related experience.