Leads the development of effective and/or innovative technical solutions with an awareness of consequences of judgements individually and through teams.
Leads risk, threat, and vulnerability assessments of the product assets and production systems in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance.
Leads development and coordination of system security requirements with different system stakeholders.
Reviews technical data and documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery.
Coordinates and advises security testers to validate coverage and impacts to analysis.
Coordinates with external customers and internal stakeholders on detection capabilities in alignment with continued airworthiness strategies.
Leads the development, implementation, and communication of the sustainment program to ensure continued product security, safety, and resiliency of digitally-connected, in-service airplane models.
Advises and checks configuration management and security of facilities, equipment, tools, data, networks, and resources used to ensure continued product security and resiliency of in-service models.
Requirements
Bachelor of Science degree from an accredited course of study in engineering, engineering technology, chemistry, physics, mathematics, data science, or computer science
Level 4: 9+ years of related work experience or an equivalent combination of education and experience
Level 5: 14+ years of related work experience or an equivalent combination of education and experience
5+ years of related work experience in systems engineering, systems integration, software engineering, electrical engineering, certification, network security, and/or cybersecurity
Security certification is desired: DoD M / DoDD certification at IASAE Level II or higher (such as Security+ CE, GSEC, SSCP, CISSP, CISA, CCNA-Security)
Working knowledge in systems, engineering, systems integration, airplane systems, and/or airplane certification
Experience in cybersecurity, security network architecture, embedded systems security, security testing and evaluation, network design, cyber physical systems or PKI infrastructure
Experience planning and executing penetration tests in Windows and Linux Operating Systems, IP-based networks, web applications, avionics, embedded systems, non-standard ethernet protocols (ARINC, etc.)
Experience with hardware and firmware security
Experience coordinating and presenting technical content to a variety of technical and non-technical audiences
Possess one or more security certifications, including but not limited to: CISSP; Security+; CEH; CCNA; UNIX/LINUX System Administration; GIAC GPEN, GWAPT, or GXPN; Offensive Security Certified Engineer (OSCE); Offensive Security Certified Professional (OSCP)