Senior Engineer, Cybersecurity (R6438)

Description

The company is a venture-backed defense technology business whose mission is to protect service members and civilians with intelligent systems. It has offices and facilities in the U.S., Europe, the Middle East and Asia-Pacific, and its technology supports operations worldwide.

The team is hiring a senior cybersecurity engineer to lead security work on an airborne aerospace and defense platform. The role spans avionics, mission systems, aircraft networks, communications, embedded software and ground-support systems.

Responsibilities

• Design the platform's cybersecurity architecture, requirements and protection strategy.
• Run threat models, vulnerability assessments, attack-surface reviews and cyber risk assessments.
• Specify protections for secure boot, authentication, access control, encryption, key management, software updates and data communications.
• Layer defenses across aircraft systems, networks, radios, data links and external interfaces.
• Lead DoD Risk Management Framework work and produce the evidence needed for authorization.
• Assess hardware, software, firmware and supplier designs for cyber risk.
• Write cybersecurity verification plans and support vulnerability scanning, penetration testing and cyber-resiliency testing.
• Agree risk mitigations and corrective actions with engineering teams, suppliers, customers and program leadership.
• Make sure security measures keep the aircraft safe, available and effective in its mission.

Requirements

• Hold a bachelor's degree in cybersecurity, computer engineering, electrical engineering, software engineering, systems engineering or a related field.
• Typically have at least 5 years of related experience alongside a bachelor's degree.
• Have worked on aircraft, aerospace, defense or other mission-critical embedded systems.
• Understand avionics, mission systems, platform networks, communications or data links.
• Have experience with threat modeling, secure system architecture, vulnerability analysis and security testing.
• Be familiar with DoD RMF, NIST security guidance, cryptography and key management.
• Show strong technical leadership, writing and customer communication skills.
• Be able to obtain and maintain the required security clearance.
• Preferred: cybersecurity experience on military aircraft, unmanned aircraft or airborne mission systems.
• Preferred: familiarity with NIST SP 800-53, NIST SP 800-160, DO-326A, DO-355 and DO-356A.
• Preferred: experience with anti-tamper, program protection, supply-chain risk management or cross-domain solutions.
• Preferred: experience supporting cyber testing, penetration testing or adversarial assessments.
• Preferred: a relevant certification such as CISSP, Security+, CEH or GIAC.
• Preferred: an active U.S. security clearance.

Conditions

Full-time regular employees receive the full-time offer package.

Temporary employees receive the temporary offer package, with pay within the range listed above.

Pay depends on factors including skill set, experience level, licenses and certifications, and work location.

All offers depend on a cleared background check and a possible reference check.

Military fellows and part-time employees are not eligible for benefits.

Contact your talent acquisition representative for more detail.

The company is an equal opportunity and affirmative action employer and welcomes candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. Ask for accommodation if you need one.

Benefits

• Temporary employees receive a temporary benefits package once they have been employed for 60 days.