This Cyber Security Engineer involves tasks like monitoring networks, responding to security incidents, analyzing threats and STIG/Imaging efforts. Performing work on one or more assignments simultaneously, such as configuration, development, integration, testing, and resolution of problems for systems; assessing, troubleshooting, and following established guidelines in escalation of hardware, software, and networking problems. As part of the security team, you will be responsible for monitoring, detecting, and responding to security incidents, performing vulnerability assessments, and ensuring our systems adhere to industry security standards.

Responsibilities/Skills:

• Assist in development and maintenance of incident response plans.
• Conduct forensic analysis of systems and networks as they relate to projects
• Stay current on cyber threats and attack techniques.
• Collaborate with external partners to investigate incidents.
• Identify vulnerabilities and assess risks.
• Implement security measures per project requirements.
• Secure aircraft, satellites, UAVs, and military-grade embedded systems.
• Ensure resilience against cyber warfare tactics (e.g., jamming, spoofing, malware injection)
• Monitor for signs of intrusion or malicious activity.
• Protect real-time operating systems (RTOS) used in aircraft and military-grade hardware.
• Secure firmware & avionics software against hacking (e.g., DO-326A Airworthiness Security).
• Perform penetration testing on avionics and weapon systems.
• Conduct vulnerability assessments and penetration tests to identify security weaknesses.
• Develop and maintain security policies and procedures to ensure compliance with industry regulations.
• Collaborate with IT and development teams to ensure secure system architectures and software development practices.
• Identify Computers in accordance with DOD regulations and other Requirements.
• Configuration of project specific computers and servers with applications and utilities, as required, capturing images of configuration for archiving and deployment.
• Apply images to computer and servers.

Qualifications: 

• Experience with computer systems in areas like applications, databases, networks, and/or security.
• Attention to detail.
• Excellent communication skills.
• The ability to work in a fast-paced environment.
• Being able to work with other IT professionals to identify and mitigate cyber threats.
• Identify threats and vulnerabilities in systems and software.
• Spot weaknesses in firewalls and install new software and hardware.
• Run vulnerability assessments and install new software and hardware.
• Ensure the security of computer systems and networks.
• Being able to use Intrusion Detection Systems (IDS) and develop signatures.
• Other duties as assigned.

Problem Solving and Discretion/Latitude:

• Deep knowledge of security tools like SIEM, firewalls, and IDS/IPS.
• Strong experience with incident response and threat detection.
• Proficiency in vulnerability assessment and patch management.
• Hands-on experience with security protocols, such as SSL/TLS, VPNs, and encryption techniques.
• Familiarity with network security architectures and frameworks.
• Excellent problem-solving and analytical thinking.
• Strong communication skills to explain technical issues to non-technical teams.
• Attention to detail to identify even the smallest security risks.
• Adaptability to stay ahead of rapidly changing security threats.
• Security tools (SIEM, firewalls, IDS/IPS).
• Threat analysis and incident response.
• Vulnerability assessment and patch management.

Knowledge/Requirements:

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ years of experience in Cyber Security, information security, or network security roles.
• Proficiency with security tools such as firewalls, intrusion detection/prevention systems (IDS/IPS), and SIEM platforms.
• Strong understanding of Cyber Security principles, including threat analysis, incident response, and vulnerability assessments.
• Strong understanding of secure avionics networks (ARINC 429, MIL-STD-1553, CAN Bus).
• Familiarity with industry regulations and compliance standards (e.g., ISO 27001, NIST, GDPR).
• Certifications such as CISSP, CEH, or CISM are highly desirable.
• Ability to obtain Security Clearance.