Cyber Security

Info Way Solutions; Pittsburgh (Allegheny County); On-site; USD 140,000 - 180,000; Full time

Job summary

Info Way Solutions is seeking a Senior Cybersecurity Engineer in Pittsburgh, PA for aerospace and avionics programs. Onsite laboratory work and customer interaction with federal contractors are expected. USC work authorization is required.

The role covers cybersecurity engineering, threat modeling, secure architectures, and embedded system security, with hands-on testing and on-site assessments as needed.

Qualifications

• Bachelor's degree in a relevant technical discipline and 8+ years of cybersecurity engineering experience.
• 3+ years of hands-on aerospace cybersecurity experience.
• Experience supporting aerospace, avionics, embedded systems, or defense cybersecurity programs.
• Strong knowledge of threat modeling, risk assessment methodologies, and security architectures.

Responsibilities

• Lead cybersecurity engineering activities for aerospace and avionics programs.
• Develop and review cybersecurity architectures for embedded systems and aircraft platforms.
• Perform threat modeling, cybersecurity risk assessments, and security reviews.
• Support vulnerability management, testing and on-site assessments as needed.

Skills

Aerospace Cybersecurity

Embedded Systems Security

Security Architecture & Design Reviews

Cryptography & Code Signing

Secure Boot & Secure Firmware Updates

Hardware Security & Root-of-Trust

Vulnerability Management

Penetration Testing & Security Assess

Secure SDLC

ITAR/Federal Aerospace Programs

Education

Bachelor's degree in Cybersecurity, CS, CE, or related field

Job description

Job Description: Senior Cybersecurity Engineer – Aerospace & Avionics ( Only for USC )

Location: Pittsburgh, PA (Onsite – Cybersecurity Lab)

Work Authorization: U.S. Citizens Only (USC)

Employment Type: Contract

Position Overview

We are seeking an experienced Senior Cybersecurity Engineer to support cybersecurity initiatives for aerospace, avionics, and compute systems programs.

The ideal candidate will possess extensive experience in cybersecurity engineering, with specialized expertise in aerospace and embedded systems security. This individual will lead cybersecurity assessments, develop security architectures, perform threat modeling and risk assessments, and support secure software and firmware development activities.

The role requires a hands‑on technical professional capable of working independently, collaborating with cross‑functional engineering teams, and engaging directly with customers, federal contractors, and aerospace stakeholders.

Key Responsibilities

1. Cybersecurity Engineering & Architecture

• Lead cybersecurity engineering activities for aerospace and avionics programs.
• Develop and review cybersecurity architectures for embedded systems, controllers, and aircraft platforms.
• Perform threat modeling, cybersecurity risk assessments, and security architecture reviews.
• Identify security vulnerabilities and recommend appropriate mitigation strategies.

2. Embedded Systems & Secure Development

• Implement and evaluate security mechanisms, including code signing, cryptography, secure boot, and secure firmware update processes.
• Define and implement cybersecurity controls for embedded systems and aerospace hardware.
• Apply hardware security and Root-of-Trust concepts to protect critical systems.

3. Security Testing & Vulnerability Management

• Conduct cybersecurity testing, vulnerability assessments, and penetration testing.
• Identify, analyze, and remediate security weaknesses.
• Support vulnerability management and security verification activities.
• Document security findings, recommendations, and mitigation plans.

4. Compliance & Regulatory Requirements

• Ensure alignment with applicable aerospace and federal cybersecurity standards.
• Support cybersecurity compliance activities for ITAR-controlled and federal aerospace programs.
• Apply relevant industry frameworks and standards, including:
• DO-326A / ED-202A
• DO-356A
• NIST Cybersecurity Framework
• FIPS 140-3
• Review customer technical requirements, RFIs, and RFQs.
• Contribute to technical proposals and cybersecurity solution development.
• Lead technical discussions with customers, federal contractors, and internal engineering teams.
• Support cybersecurity lab testing and occasional on‑site assessments at customer and aircraft locations.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Aerospace Engineering, or a related technical discipline.
• Minimum 8+ years of cybersecurity engineering experience.
• Minimum 3+ years of hands‑on aerospace cybersecurity experience.
• Demonstrated experience supporting aerospace, avionics, embedded systems, or defense-related cybersecurity programs.
• Strong knowledge of cybersecurity architecture, threat modeling, and risk assessment methodologies.

Required Technical Skills

• Aerospace Cybersecurity
• Embedded Systems Security
• Security Architecture & Design Reviews
• Cryptography & Code Signing
• Secure Boot & Secure Firmware Updates
• Hardware Security & Root-of-Trust
• Vulnerability Management
• Penetration Testing & Security Assessments
• Secure Software Development Lifecycle (SDLC)
• ITAR-Controlled / Federal Aerospace Programs

Preferred Qualifications

• Experience supporting FAA, Department of Defense (DoD), defense, or commercial aerospace programs.
• Knowledge of aircraft control systems, avionics, and aerospace hardware security architectures.
• Familiarity with aerospace cybersecurity certification and compliance processes.
• Experience working with federal contractors and aerospace customers.
• Experience leading technical cybersecurity discussions and customer-facing assessments.

Additional Requirements

• Must be able to work onsite at the cybersecurity laboratory in Pittsburgh, PA.
• Must be willing to travel occasionally for customer engagements and field testing.
• Strong written and verbal communication skills.
• Ability to independently lead technical assessments and collaborate with multidisciplinary engineering teams.

Ideal Candidate Profile

The ideal candidate is a hands‑on Senior Cybersecurity Engineer with deep expertise in aerospace and avionics security. They should have the ability to independently lead cybersecurity assessments, perform threat and risk analysis, design secure embedded systems architectures, and support secure development initiatives for aerospace and defense applications.

Important – Work Authorization

This position is strictly open to U.S. Citizens (USC) only. Other work authorization categories will not be considered.