Cybersecurity Engineer - Columbia, MD

Rohde & Schwarz (China) Technology Co., Ltd.; Columbia (MD); On-site; USD 80,000 - 110,000; Full time

Job summary

Rohde & Schwarz (China) Technology Co., Ltd. is seeking a cybersecurity specialist based in Columbia, Maryland. You will perform detailed cybersecurity assessments of ATC systems, map controls to cybersecurity frameworks, and produce assessment reports.

Your role will involve collaborating with engineering teams to design secure architectures for ATC systems while ensuring compliance with regulatory requirements. This position offers an opportunity to work on critical aviation cybersecurity challenges.

Responsibilities

• Perform detailed cybersecurity assessments of ATC systems, subsystems, and COTS components.
• Map component‑level controls to applicable cybersecurity frameworks, primarily NIST SP 800‑53.
• Identify deficiencies and evaluate risk impact on safety‑critical functions.
• Produce assessment reports, risk matrices, and control implementation summaries.
• Contribute to the creation and documentation of System Security Plans for ATC systems.
• Describe system boundaries, data flows, interfaces, and security controls.
• Ensure consistency with regulatory and compliance requirements.
• Collaborate with engineering and certification teams for audits.
• Design secure architectures for ATC systems.
• Define system‑level and component‑level security controls.
• Produce architecture diagrams and security models.
• Align solutions with aviation safety‑critical constraints.
• Support R&D teams by translating security requirements into engineering tasks.
• Review system designs for compliance with security standards.
• Provide guidance on closing identified security gaps.
• Communicate cybersecurity concepts in an engineering‑friendly manner.

Job description

• Perform detailed cybersecurity assessments of ATC systems, subsystems, and COTS components.
• Map component‑level controls to applicable cybersecurity frameworks, primarily NIST SP 800‑53, as well as complementary frameworks (e.g., NIST CSF, ISO 27001, or aviation‑specific guidelines when applicable).
• Identify deficiencies, evaluate risk impact on safety‑critical functions, and define remediation recommendations.
• Produce assessment reports, risk matrices, and control implementation summaries.
• Contribute to the creation, documentation, and maintenance of System Security Plans for ATC systems across their life cycle. -
• Describe system boundaries, data flows, interfaces, security controls, operational environments, and residual risks.
• Ensure consistency with regulatory, customer, and internal compliance requirements.
• Collaborate with systems engineering and certification teams to prepare security deliverables for audits and approval processes.
• Design secure architectures for ATC systems, addressing confidentiality, integrity, availability, traceability, and resilience.
• Define system‑level and component‑level security controls, zoning concepts, segmentation, and protective monitoring strategies.
• Produce architecture diagrams, security models, and interface control documents.
• Align solutions with aviation safety‑critical constraints, real‑time performance requirements, and applicable cybersecurity policies.
• Support R&D and engineering teams by translating security requirements into actionable engineering tasks.
• Review system designs, prototypes, and interfaces for compliance with security standards.
• Provide guidance on closing identified security gaps through secure coding practices, architectural changes, or control enhancement.
• Communicate complex cybersecurity concepts in a clear, engineering‑friendly manner.