Mandatory Requirements:
- 8+ years of cybersecurity engineering experience.
- 3+ years of aerospace cybersecurity experience.
- Strong experience with:
- Aerospace threat modeling and risk assessments
- Embedded systems security
- Cryptography and code signing
- Vulnerability management
- Secure development lifecycle (SDLC)
- Hardware security and root-of-trust concepts
- Familiarity with aerospace cybersecurity standards such as:
- DO-326A / ED-202A
- DO-356A
- NIST Cybersecurity Framework
- FIPS 140-3
- Experience supporting ITAR-controlled and/or federal aerospace programs.
Key Responsibilities
- Lead cybersecurity activities for aerospace and avionics programs.
- Perform threat modeling, risk assessments, and security architecture reviews.
- Support secure software development, code signing, cryptography, secure boot, and secure firmware update processes.
- Conduct cybersecurity testing, vulnerability assessments, and penetration testing.
- Define cybersecurity measures for aerospace embedded systems, controllers, and aircraft platforms.
- Support compliance with aerospace and federal cybersecurity requirements.
- Review customer requirements, RFIs/RFQs, and contribute to proposal development.
- Interface with customers, federal contractors, and internal engineering teams.
- Support lab-based testing and occasional on-site assessments at customer and aircraft locations.
Preferred Qualifications
- Experience supporting FAA, DoD, defense, or commercial aerospace programs.
- Knowledge of aircraft control systems, avionics, and aerospace hardware security architectures.
Additional Requirements
- Ability to work from the Pittsburgh cybersecurity lab.
- Willingness to travel as required for customer engagements and field testing.
- Strong communication skills to lead technical discussions and customer interactions.