Cyber Security Engineer

Info Way Solutions; Pittsburgh (Allegheny County); On-site; USD 120,000 - 180,000; Full time

Job summary

Info Way Solutions in the United States seeks a hands-on Senior Cybersecurity Engineer to lead aerospace and avionics cybersecurity activities. You will perform threat modeling, risk assessments, and security architecture reviews for complex systems, guiding secure software development, cryptography, and secure boot processes.

The role involves testing, vulnerability management, compliance with DO-326A/DO-356A and NIST CSF, and frequent collaboration with customers, federal contractors, and

Qualifications

• 8+ years of cybersecurity engineering experience.
• 3+ years of aerospace cybersecurity experience.
• Experience with aerospace threat modeling and risk assessments.
• Knowledge of embedded systems security and hardware root-of-trust concepts.
• Familiarity with cryptography, code signing, vulnerability management, and SDLC.
• Experience supporting ITAR-controlled and/or federal aerospace programs.
• Strong communication skills for leading technical discussions with customers.

Responsibilities

• Lead cybersecurity activities for aerospace and avionics programs.
• Perform threat modeling, risk assessments, and security architecture reviews.
• Support secure software development, code signing, cryptography, secure boot, and secure firmware update processes.
• Conduct cybersecurity testing, vulnerability assessments, and penetration testing.
• Define cybersecurity measures for aerospace embedded systems, controllers, and aircraft platforms.
• Support compliance with aerospace and federal cybersecurity requirements.
• Review customer requirements, RFIs/RFQs, and contribute to proposal development.
• Interface with customers, federal contractors, and internal engineering teams.
• Support lab-based testing and occasional on-site assessments at customer and aircraft locations.

Skills

Cybersecurity engineering

Aerospace cybersecurity

Threat modeling

Risk assessments

Embedded systems security

Cryptography & code signing

Vulnerability management

Secure Development Lifecycle

Hardware security

Aerospace programs knowledge

Tools

DO-326A/ED-202A

DO-356A

NIST CSF

FIPS 140-3

Job description

• Lead cybersecurity activities for aerospace and avionics programs.
• Perform threat modeling, risk assessments, and security architecture reviews.
• Support secure software development, code signing, cryptography, secure boot, and secure firmware update processes.
• Conduct cybersecurity testing, vulnerability assessments, and penetration testing.
• Define cybersecurity measures for aerospace embedded systems, controllers, and aircraft platforms.
• Support compliance with aerospace and federal cybersecurity requirements.
• Review customer requirements, RFIs/RFQs, and contribute to proposal development.
• Interface with customers, federal contractors, and internal engineering teams.
• Support lab-based testing and occasional on-site assessments at customer and aircraft locations.

Required Qualifications

• 8+ years of cybersecurity engineering experience.
• 3+ years of aerospace cybersecurity experience.

Strong experience with:

• Aerospace threat modeling and risk assessments
• Embedded systems security
• Cryptography and code signing
• Vulnerability management
• Secure Development Lifecycle (SDLC)
• Hardware security and root-of-trust concepts

Familiarity with aerospace cybersecurity standards such as:

• DO-326A / ED-202A
• DO-356A
• NIST Cybersecurity Framework
• FIPS 140-3
• Experience supporting ITAR-controlled and/or federal aerospace programs.

Preferred Qualifications

• Experience supporting FAA, DoD, defense, or commercial aerospace programs.
• Knowledge of aircraft control systems, avionics, and aerospace hardware security architectures.

Additional Requirements

• Ability to work from the Pittsburgh cybersecurity lab.
• Willingness to travel as required for customer engagements and field testing.
• Strong communication skills to lead technical discussions and customer interactions.

Ideal Candidate

A hands-on cybersecurity professional with deep aerospace domain expertise who can independently lead cybersecurity assessments, customer discussions, and secure development activities for aerospace and defense projects.