Cybersecurity Engineer

Job Duties

• Support the MV-75 Program Office as a tactical aviation weapon-system cybersecurity engineer focused on platform risk, RMF execution, and embedded system security solutions
• Review, assess, and advise on OEM on cybersecurity artifacts, including System Security Plans, Security Assessment Plans, Security Assessment Reports, POA&Ms, continuous monitoring strategies, hardware/software inventories, architecture diagrams, interface descriptions, and control implementation evidence.
• Translate RMF controls into aviation platform-relevant requirements, verification approaches, and risk statements that apply to embedded avionics, mission systems, tactical databus architectures, software loads, maintenance systems, and support equipment
• Support cybersecurity requirements decomposition, allocation, traceability, and verification across MV-75 system, subsystem, software, hardware, mission equipment, and external interface boundaries.
• Advise the Government on cybersecurity risk posture, residual risk, mitigation sufficiency, operational impacts, and ATO decision readiness for the MV-75 platform.
• Review cybersecurity implementation evidence against applicable DoD, Army, and program requirements, including RMF, NIST SP 800-53/800-53A, DoDI 8510.01, Army cybersecurity policy, and program-specific authorization guidance.
• Coordinate with Government cybersecurity, systems engineering, test, airworthiness, logistics, software, and acquisition stakeholders to ensure cybersecurity considerations are integrated into platform engineering and program decision processes.
• Assess cybersecurity impacts of proposed engineering changes, software updates, configuration changes, interface changes, obsolescence actions, and system-of-systems integrations.
• Review vulnerability assessment results, scan outputs, penetration test findings, software assurance results, supply chain risk inputs, and cyber test evidence to determine platform-level risk and required Government action.
• Support cybersecurity input to test planning, verification events, lab events, flight test readiness, operational test planning, and Government reviews.
• Evaluate cybersecurity risks associated with embedded real-time operating systems, avionics networks, mission systems, tactical data links, aircraft maintenance interfaces, ground support equipment, and external system interfaces.