Cyber Security Product RISK Manager (Contract)

Airbus US Space & Defense, Inc.; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Airbus US Space & Defense, Inc. is seeking a Cyber Security Product Risk Manager to coordinate security throughout the product lifecycle, spanning spacecraft components and flight software. You will work with Cyber, Space Engineering, and Contracts teams to ensure hardening standards are met.

In this role, you will develop methods to detect security events on hardware, reverse engineer firmware, and implement RMF-based cybersecurity controls. A government clearance is required.

Qualifications

• Bachelor's Degree in STEM or equivalent cybersecurity experience.
• Minimum 5 years of project management experience in aerospace or defense.
• Experience with RMF, CNSSI-1253, and NIST 800-53 controls.
• Ability to obtain and maintain a government security clearance.

Responsibilities

• Responsible for the Cyber security of our products.
• Develop methodology to detect security events on hardware, including PCB analysis, and debug port detection.
• Extract and reverse engineer firmware, exploit development.
• Produce System Security Plan (SSP) and related artifacts with NIST controls alignment.
• Lead cross-functional RMF CyberSecurity, CyberResilience, and Cyber Survivability efforts.

Skills

Project management

RMF implementation

NIST 800-53 knowledge

Cybersecurity

Education

Bachelor's degree in STEM

Tools

Microsoft Office

Job description

This position can be located at multiple sites across the United States. Work locations: Arlington or Herndon, VA.

Position Summary

Airbus US is looking for a Cyber Security Product Risk Manager to who works with specialists from the Cyber, Space Engineering, and Contracts departments to ensure our products meet the applicable hardening requirements with a view that cyber risks are identified and controlled during the entire product life cycle. The products include Spacecraft and associated ancillary components.

Primary Responsibilities

• Responsible for the Cyber security of our products.
• Develop methodology to detect security events on hardware, including PCB analysis, and debug port detection.
• Extract and reverse engineer firmware, exploit development.
• Knowledge of Space BUS architecture, Secure boot.
• Production of System Security Plan (SSP). These artifacts include - a System Security Plan (SSP), Risk Assessment Report, Security Controls Traceability Matrix, and Plans of Actions & Milestones (POA&Ms). Familiarity with the NIST 800-53 controls (as applied through CNSSI-1253).
• Working as an individual contributor representing the Cyber team within the Space engineering team to architect, implement, and execute Risk Management Framework (RMF) CyberSecurity, CyberResilience, Cyber Survivability requirements of satellite systems, onboard computers, and flight software.
• All candidates must be capable of supporting cybersecurity assessment events where they work closely with systems administrators and other cyber personnel and engineering personnel (ISSOs, ISSMs,) to satisfactorily demonstrate that all applicable security controls are implemented within the system boundary.
• Proactively engages with Compliance and Legal to ensure adherence with all external and internal compliance and regulatory requirements.
• Establishes strategic peer-to-peer partnerships with suppliers, manufacturers, and other industry experts in order to develop new products or improve existing products while ensuring that applicable boundaries/firewalls are respected.
• Manages multiple product and capability initiatives to drive clear prioritization and direction to cross-functional teams including Cyber Security, and Space Engineering from Airbus US as well as key client representatives.
• Provides leadership and serves as the escalation point for all issues arising across functional teams in assigned workstreams.
• Provide updates to senior leaders and other internal and external stakeholders on integration project statuses on a regular basis.
• Actively seeks and gathers customer/stakeholder feedback and applies is to product development as appropriate.
• Develop business opportunities through peer-to-peer relationships with industry influencers and government decision-makers.
• Other projects as assigned

Primary Qualifications

Education

• Bachelor's Degree in a STEM field (Cyber security, Electrical Engineering, Aeronautical Engineering, Aerospace Engineering) or equivalent experience (5 years Cybersecurity experience in the aerospace industry or military).

Experience

• Familiarity with the NIST 800-53 controls (as applied through CNSSI-1253) and Development Security operations.
• Extensive experience of RMF implementation and defensive Cyber operations.
• Minimum of 5 years Project Management experience that includes:
  • Leading large complex programs over multiple releases.
  • A proven track record of launching new products or applications with demonstrated business impact.
  • Ability to influence and coordinate multi-functional teams.

Qualifications

• Demonstrated experience of effective verbal and written communication skills across functions and multiple levels of leadership.
• Demonstrated ability to manage complex initiatives and projects in a matrixed, high-speed, and quickly changing business environment.
• Outstanding communication, relationship-building influencing, and collaboration skills.
• Demonstrated strong quality/process improvement experience, with relevant examples that improved business performance and customer experience.
• Advanced problem-solving skills with the ability to develop innovative solutions in a fast-changing environment.

Communication Skills (Spoken, Written, Influencing, Proficiency in Other Languages)

• Excellent communication skills, both verbal and written.

Technical Systems Proficiency

• Requires advanced computer skills with a focus on Microsoft Office applications.

Travel Required

• Up to 25% travel.
• US citizenship is required.

Clearance

• Ability to obtain and maintain a government security clearance at the facility clearance level.

Airbus provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, pregnancy, marital status, veteran status, or other legally protected status. In addition to federal law requirements, Airbus complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, demotion, termination, layoff, recall, transfer, leaves of absence, compensation, benefits, and training. Airbus expressly prohibits any form of workplace harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, pregnancy, marital status, veteran status or other legally protected status.

As a matter of policy, Airbus does not sponsor visas for US positions unless specified. Only applicants with current work authorization will be considered. Airbus does not offer tenured or guaranteed employment. Employment with Airbus is at will, meaning either the company or the employee can terminate the employment relationship at any time, with or without cause, with or without notice. Airbus reserves the right to revise or change job duties and responsibilities as the need arises. This position description does not constitute a written or implied contract of employment.

By submitting your resume or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation, or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail].