Classified Systems Specialist

Classified Systems ArchitectureSystem ArchitectureKnowledge and ability to design classified system architectures, including:Stand-alone systems vs. segregated networksAir-gapped environments and controlled data transfersNetwork segmentationDefense-in-depth strategiesThreat modelingSecure by design / secure by default approachesOS hardeningSystem integrity controlMinimization of the Trusted Computing Base (TCB) in High Assurance Systems (HAS)Integration and configuration in closed environmentsSelection of system components (e.g., TEMPEST, EMC emissions, data media protection, etc.)Patch and update management in isolated environmentsNetworkingDesign of high-security networksNetwork traffic analysisNetwork security hardeningCryptographyKnowledge of cryptographic techniquesKey generation and secure storageImplementation of cryptography in compliance with government requirementsCryptographic key lifecycle managementPhysical SecurityBasic knowledge of security zones/protected areasBasic knowledge of physical access control systemsSystem Assessment & CybersecurityEvaluation of system componentsKnowledge of Secure SDLCDependency management (VM/VA, SBOM)Integration of components in isolated environmentsKnowledge of techniques used in cybersecurity testingPlanning and supervision of tests confirming achievement and maintenance of the required security level for classified systemsVerification of cybersecurity test reportsRisk & Incident ManagementKnowledge of incident management proceduresReporting to relevant authoritiesPlanning and supervision of incident response (IR) proceduresThreat identificationRisk analysis (qualitative and quantitative)Selection of security controlsResidual risk acceptanceOther RequirementsStrong communication skills within project teamsCommunication with clientsCommunication with certification and/or accreditation bodiesPreparation of customer proposals/offersSecurity ClearancePersonal security clearance at the level of:TAJNENATO SECRETSECRET UE / EU SECRETor willingness to undergo a security clearance procedureStandards & RegulationsKnowledge of:ISO/IEC 27000 seriesISO/IEC 15408NATO INFOSEC / cryptographic standardsSecurity PolicyNIS2CRANISTNATO/STANAGCommon CriteriaLanguagesPolish - C2English - C1Additional AdvantagesExperience working with public administration, defense, and/or the security sector Project description:At Spyrosoft Solutions, we are expanding our activities in the defence & security sectors at Spyrosoft Defence & Aerospace Business Unit. As we launch new projects and engage with prospective customers, we are looking for experienced professionals who can support the design, accreditation, and operation of highly secure and classified systems in compliance with national and international security standards.About SpyrosoftSpyrosoft is an authentic, cutting-edge software engineering company, established in 2016. In 2021 and 2022, we were among the fastest growing technology companies in Europe, according to the Financial Times. We were founded by a group of tech experts with established backgrounds in software engineering, who created an ‘engineer-to-engineer’ workplace, powered by enthusiasm, fairness and authentic relationships. Having a unique offering, which bridge the gap between technology and business, we specialise in technology solutions for industry 4.0, automotive, geospatial, healthcare & life sciences, employee experience & education and financial services industries. ,[Management of classified systems, Knowledge of Polish regulations concerning the protection of classified information, Knowledge of security accreditation procedures for classified systems, Information classification and access management, Cooperation with auditors and government authorities, Documentation of design decisions related to data security, Ability to justify selected technical solutions in classified systems, Ability to manage procedures related to the design, certification, and accreditation of classified systems, Ability to create documentation for secure systems, including security policies and procedures, such as Special Security Requirements (SSR) and Secure Operating Procedures (SOP), Configuration management for projects and classified systems, Conducting audits and inspections of classified systems, Training integrators and users of classified systems] Requirements: Security, Cryptography, Cybersecurity, Communication skills, IEC