Cybersecurity Engineer - Columbia, MDRohde & Schwarz
Job Summary
- Perform detailed cybersecurity assessments of ATC systems, subsystems, and COTS components.
- Map component‑level controls to applicable cybersecurity frameworks, primarily NIST SP 800‑53, as well as complementary frameworks (e.g., NIST CSF, ISO 27001, or aviation‑specific guidelines when applicable).
- Identify deficiencies, evaluate risk impact on safety‑critical functions, and define remediation recommendations.
- Produce assessment reports, risk matrices, and control implementation summaries.
- Contribute to the creation, documentation, and maintenance of System Security Plans for ATC systems across their life cycle. -
- Describe system boundaries, data flows, interfaces, security controls, operational environments, and residual risks.
- Ensure consistency with regulatory, customer, and internal compliance requirements.
- Collaborate with systems engineering and certification teams to prepare security deliverables for audits and approval processes.
- Design secure architectures for ATC systems, addressing confidentiality, integrity, availability, traceability, and resilience.
- Define system‑level and component‑level security controls, zoning concepts, segmentation, and protective monitoring strategies.
- Produce architecture diagrams, security models, and interface control documents.
- Align solutions with aviation safety‑critical constraints, real‑time performance requirements, and applicable cybersecurity policies.
- Work closely with the product engineering teams based in Europe and North America.
- Support R&D and engineering teams by translating security requirements into actionable engineering tasks.
- Review system designs, prototypes, and interfaces for compliance with security standards.
- Provide guidance on closing identified security gaps through secure coding practices, architectural changes, or control enhancement.
- Communicate complex cybersecurity concepts in a clear, engineering‑friendly manner.
- Familiarity in IP networking, VoIP, and RF communications or similar.
