Aerospace Cybersecurity Engineer - RMF/ATO Expert

Grid Aero, Inc.; San Leandro (CA); Sur place; USD 150 000 - 200 000; Plein temps

Résumé du poste

Grid.aero is seeking a Cybersecurity Engineer to own cybersecurity for its autonomous aircraft and supporting systems. You will lead the authority to operate process, secure the development environment, and integrate security into design from the start, choosing simple controls that work.

You will collaborate with software teams to implement a secure DevSecOps pipeline, assess threats, and drive fixes into the design while protecting sensitive information across the company.

Qualifications

• First-principles thinker who thrives in a fast-paced environment.
• 4+ years of cybersecurity engineering experience.
• Experience with RMF and ATO packages.
• Familiarity with NIST SP 800-53 and NIST SP 800-171.
• Experience with embedded, avionics, or weapon system cybersecurity preferred.
• Security+, CISSP, or similar certification preferred.
• Nice to have: experience with CMMC assessment and compliance.

Responsabilités

• Lead the RMF process through authority to operate (ATO).
• Build and maintain security documentation such as system security plans and control assessments.
• Define security requirements for the aircraft, ground systems, and data links.
• Protect controlled unclassified information across the company.
• Work with the software team to build and run a secure DevSecOps pipeline.
• Assess threats and vulnerabilities and drive fixes into the design.

Connaissances

First-principles thinking

Cybersecurity engineering

RMF/ATO experience

NIST SP 800-53/800-171

Embedded/avionics cybersecurity

Security+ or CISSP

CMMC experience

Description du poste

Grid.aero is seeking a Cybersecurity Engineer to own cybersecurity for its autonomous aircraft and supporting systems. You will lead the authority to operate process, secure the development environment, and integrate security into design from the start, choosing simple controls that work.

You will collaborate with software teams to implement a secure DevSecOps pipeline, assess threats, and drive fixes into the design while protecting sensitive information across the company.