Aircraft Security Engineer

Note: Client round must attend F2F interview

This is Sr Engineer, Aircraft Security (Detection, Remediation & PKI)

Description:

Writes, tests, and documents technical work products (e.g., code, scripts, processes) according to organizational standards and practices

• Solves technical problems and builds components/libraries with far-ranging impact
• Delivers high quality work and coaches more junior engineers on technical craftsmanship
• Conducts root cause analysis to identify systemic problems and defines and leads execution of action items to address
• Designs thoughtfully integrated systems that model organizational best practices, allowing disparate teams across product domains to deliver value with speed, scale, and reliability
• Oversees the management of technical debt in existing systems and drives opportunities to eliminate within ongoing implementations
• Consistently anticipates scaling, latency, and durability challenges and guides teams in implementation of mitigating strategies
• Partners with the security organization to incorporate security conscious practices early in the lifecycle of new systems
• Thoughtfully evaluates technical risks and guides toward practical prevention strategies
• Consistently reflects on squad delivery practices throughout their span of influence, recommends improvements to leadership and drives their implementation
• Maintains a focus on removing the duplication of effort across teams and proactively identifies opportunities for reuse within their span of influence
• Thoughtfully measures and assesses team and identifies areas of development for individuals
• Explores emerging technologies, leads development of prototypes with little or no guidance and incorporates into architectural solutions where appropriate

Top Requirement:

5+ years in security engineering with demonstrated independent project ownership (not queue-based SOC analyst experience), including hands‑on PKI engineering

Self-directed detection engineering & investigation — Microsoft Sentinel, KQL/query and rule authoring, dashboards, and end‑to‑end security event investigation, driven independently with strong written documentation (not queue/triage‑based SOC work).

PKI engineering (not just certificate consumption) — demonstrable understanding of PKI solution design and operations: enrollment protocols (SCEP, EST), Certificate Policy / Certification Practice Statement (CP/CPS), trusted roles, Levels of Assurance, NIST SP 800-63, and real use cases such as certificate-based authentication and software signing/validation.

Remediation lifecycle engineering — owning remediation-plan review & vulnerability/finding tracking from finding to validated closure.

Nice to Have Skills and Experience (preferred but not required):

Hands‑on AI/agentic security tooling (e.g., Claude / LLM‑assisted code & configuration analysis, prompt engineering for security use cases) per CISO AI direction; absolute endpoint platform engineering (SSO, policy groups, API); scripting/automation (Python/PowerShell); aviation / OT / cyber‑physical or embedded‑systems exposure; HSM / key‑management and code‑signing infrastructure; aviation security