Senior Engineer, Cybersecurity (R5972)

Team: X-BAT Engineering - Mechanical

Location: Washington, D.C.

Commitment: Full Time Employee

Workplace Type: onsite

Job Description:

What you'll do:

Develop the platform’s cybersecurity architecture, requirements, and protection strategy.
Perform threat modeling, vulnerability assessments, attack-surface analysis, and cyber risk assessments.
Define protections for secure boot, authentication, access control, encryption, key management, software updates, and data communications.
Apply defense-in-depth across aircraft systems, networks, radios, data links, and external interfaces.
Lead DoD Risk Management Framework activities and develop required authorization evidence.
Evaluate hardware, software, firmware, and supplier designs for cybersecurity risks.
Develop cybersecurity verification plans and support vulnerability scanning, penetration testing, and cyber-resiliency testing.
Coordinate risk mitigation and corrective actions with engineering teams, suppliers, customers, and program leadership.
Ensure cybersecurity solutions support aircraft safety, availability, and mission effectiveness.

Required qualifications:

Bachelor’s degree in cybersecurity, computer engineering, electrical engineering, software engineering, systems engineering, or a related field.
Typically requires a minimum of 5 years of related experience with a Bachelor’s degree.
Experience with aircraft, aerospace, defense, or other mission-critical embedded systems.
Knowledge of avionics, mission systems, platform networks, communications, or data links.
Experience with threat modeling, secure system architecture, vulnerability analysis, and security testing.
Familiarity with DoD RMF, NIST security guidance, cryptography, and key management.
Strong technical leadership, writing, and customer communication skills.
Ability to obtain and maintain the required security clearance.

Preferred qualifications:

Cybersecurity experience on military aircraft, unmanned aircraft, or airborne mission systems.
Familiarity with NIST SP 800-53, NIST SP 800-160, DO-326A, DO-355, and DO-356A.
Experience with anti-tamper, program protection, supply-chain risk management, or cross-domain solutions.
Experience supporting cyber testing, penetration testing, or adversarial assessments.
Relevant certification such as CISSP, Security+, CEH, or GIAC.
Active U.S. security clearance.