Cybersecurity Specialist
Avion Solutions Huntsville, Alabama, United States
Defense and Space Manufacturing · 201-500 employees
About the role
The Cybersecurity Specialist will embed RMF requirements into aircraft engineering designs and manage authorization packages to maintain ATO for aviation platforms. They will also lead system security assessments, coordinate vulnerability testing, and manage mitigation strategies for non-compliant controls.
What they look for
Requirements
Candidates must possess a Bachelor's degree in a technical discipline and over 10 years of relevant cybersecurity experience, preferably in aviation. A DoW 8570 IAT or IAM Level II certification is required, along with the ability to obtain and maintain a security clearance.
Full description
Avion Solutions Inc., a 100% employee-owned company, is seeking candidates for a Cybersecurity Specialist to support the Fixed Wing Project Office (FWPO). This position is located in Huntsville, AL.
Job Responsibilities/Duties:
- Serve as the primary cybersecurity specialist while supporting aircraft systems engineers, software developers, and systems architects to embed RMF requirements directly into the engineering design process.
- Oversee the development, maintenance, and submission of RMF authorization packages utilizing the eMASS compliance tool to secure and maintain ATO for aviation Intelligence/Surveillance/Reconnaissance (ISR) and test platforms.
- Lead system lifecycles, to include self-assessments against NIST SP 800-53/CNSSI 1253 security controls tailored for Closed Restricted Networks (CRN), tactically deployed ISR systems.
- Develop and manage Plans of Action and Milestones (POA&Ms) for non-compliant controls, coordinating with engineering teams to implement mitigation strategies during platform integration.
- Provide cybersecurity guidance during the integration and testing of new sensor payloads, datalinks, and mission systems onto Federal Aviation Administration (FAA) certificated aircraft.
- Coordinate with external test organizations (DOT&E, Blue Teams, etc.) to execute Cyber Tabletop (CTT), Cyber Development Testing (CDT), and Cooperative Vulnerability and Penetration (CVPA) events on various fixed-wing aircraft platforms.
- Oversee and maintain the security posture of SILs and simulation environments used for pre-flight software testing and vulnerability discovery.
- Other duties as assigned.
Required Experience:
- Bachelor's Degree (engineering or related technical discipline) and 10+ years of relevant cybersecurity experience, preferably in aviation platforms.
- Experience with implementing and evaluating DoW Security Technical Implementation Guide (STIG) requirements, NIST RMF, IAVMs, and cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer).
- Must have prior experience embedding Risk Management Framework (RMF) requirements into aircraft system designs and have a background in managing and advancing RMF authorization packages through the Authority to Operate (ATO) process.
- Experienced with NIST security controls and the Enterprise Mission Assurance Support Service (eMASS).
- Must demonstrate knowledge of NIST SP 800-53/CNSSI 1253 and work with Program Managers, Original Classification Authority (OCA), and Systems Security Engineers (SSE).
- Knowledge of information system architecture and standards as they apply to cybersecurity.
- Knowledge of confidentiality of information, privacy protection, data security, and other information security issues that are important in a DoW-regulated industry.
- Experienced with all forms of information technology security, policy writing, auditing, compliance, and creating, maintaining, and auditing IT security controls and procedures.
- DoW 8570 IAT or IAM Level II certification.
- Must be a U.S. citizen and have the ability to obtain/maintain a DoW security clearance.
- Must be able to travel up to 15% of the time.
Preferred Qualifications:
- Master's Degree.
- 8570 IAT or IAM level III preferred (i.e., CISSP, CISA, CASP, GSLC, CAP, CASP, CISM, CEH).
- Experience in a DoW security environment preferred.
- Experience in systems, network, and endpoint security.
- Excellent knowledge of information security technology, such as firewalls, Intrusion Detection Systems (IDS), Intrusion Detection and Prevention Systems (IPDS), and anti-malware.
Equal Opportunity: Avion Solutions, Inc. reaffirms its belief in equal employment opportunity for all employees and applicants. Avion Solutions, Inc. is an Equal Employment Opportunity Employer and a VEVRAA-governed Federal Contractor that affords equal employment opportunity to protected veterans and people with disabilities. Avion Solutions, Inc. provides all employees and job applicants equal employment opportunities in hiring and promotion without regard to age, sex, sexual orientation, marital status, race, religion, color, veteran status, genetic information, physical or mental disability, national origin, or any other reason prohibited by law.
Similar roles
-
Senior Security Engineer- Hybrid
Akamai Tel-Aviv, Tel-Aviv District, Israel
-
Cybersecurity Engineer
ISPA Technology Panama City Beach, Florida, United States
-
Systems Cybersecurity Journeyman
Applied Research Solutions Bedford, Massachusetts, United States · $140K–$160K/yr
-
Sr Systems Engineer/ Information Security Engineer
ELEVI Associates Annapolis Junction, Maryland, United States · $170K–$200K/yr
-
CRA Compliance and Product Security Engineer
Valce Talent Solutions Mexico
-
CERT Adviseur Cybersecurity
Workbuddy Zoetermeer, South Holland, Netherlands · €46K–€58K/yr