Cybersecurity Engineer - Columbia, MD

ROHDE & SCHWARZ GmbH & Co. KG; Columbia (MD); On-site; USD 80,000 - 120,000; Full time

Job summary

ROHDE & SCHWARZ GmbH & Co. KG in Columbia, Maryland, is looking for a cybersecurity expert to perform detailed assessments of ATC systems and ensure compliance with various security frameworks.

The ideal candidate will map controls, identify deficiencies, and design secure architectures while collaborating with engineering teams to address security requirements and produce necessary documentation.

Responsibilities

• Perform detailed cybersecurity assessments of ATC systems, subsystems, and COTS components.
• Map component-level controls to applicable cybersecurity frameworks.
• Identify deficiencies and define remediation recommendations.
• Produce assessment reports and risk matrices.
• Contribute to the creation of System Security Plans.
• Describe system boundaries and security controls.
• Ensure compliance with regulatory requirements.
• Collaborate with engineering teams for security deliverables.
• Design secure architectures for ATC systems.
• Define security controls and protective monitoring strategies.
• Produce architecture diagrams and security models.
• Align solutions with aviation safety-critical constraints.
• Translate security requirements into actionable engineering tasks.
• Review system designs for compliance with security standards.
• Provide guidance on closing identified security gaps.
• Communicate complex cybersecurity concepts clearly.

Job description

• Perform detailed cybersecurity assessments of ATC systems, subsystems, and COTS components.
• Map component‑level controls to applicable cybersecurity frameworks, primarily NIST SP 800‑53, as well as complementary frameworks (e.g., NIST CSF, ISO 27001, or aviation‑specific guidelines when applicable).
• Identify deficiencies, evaluate risk impact on safety‑critical functions, and define remediation recommendations.
• Produce assessment reports, risk matrices, and control implementation summaries.
• Contribute to the creation, documentation, and maintenance of System Security Plans for ATC systems across their life cycle. -
• Describe system boundaries, data flows, interfaces, security controls, operational environments, and residual risks.
• Ensure consistency with regulatory, customer, and internal compliance requirements.
• Collaborate with systems engineering and certification teams to prepare security deliverables for audits and approval processes.
• Design secure architectures for ATC systems, addressing confidentiality, integrity, availability, traceability, and resilience.
• Define system‑level and component‑level security controls, zoning concepts, segmentation, and protective monitoring strategies.
• Produce architecture diagrams, security models, and interface control documents.
• Align solutions with aviation safety‑critical constraints, real‑time performance requirements, and applicable cybersecurity policies.
• Support R&D and engineering teams by translating security requirements into actionable engineering tasks.
• Review system designs, prototypes, and interfaces for compliance with security standards.
• Provide guidance on closing identified security gaps through secure coding practices, architectural changes, or control enhancement.
• Communicate complex cybersecurity concepts in a clear, engineering‑friendly manner.