Cybersecurity Engineer, Governance & Compliance - Frederick, MD

Rohde & Schwarz (China) Technology Co., Ltd.; Frederick (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

Rohde & Schwarz (China) Technology Co., Ltd. seeks a cybersecurity engineer to develop, maintain, and improve governance processes, standards, templates, and technical guidance.

You will analyze customer, contractual, regulatory, and internal cybersecurity requirements and translate them into actionable system and engineering requirements, mapping controls to NIST SP 800-53, CSF, CIS, ISO 27001, and related standards.

Qualifications

• Experience translating cybersecurity requirements into system and engineering requirements.
• Familiarity with NIST SP 800-53, CSF, DISA STIGs, CIS Benchmarks, ISO 27001.
• Experience developing System Security Plans (SSPs) and risk assessments.
• Ability to work with engineering teams and customers to implement controls.

Responsibilities

• Develop, maintain cybersecurity governance processes, standards, templates, and guidance.
• Translate requirements into actionable system and engineering requirements.
• Map controls to frameworks (NIST SP 800-53, CSF, DISA STIGs, CIS, ISO 27001).
• Create and maintain SSPs, assessment reports, risk matrices, and related docs.
• Maintain traceability between customer requirements and security controls.
• Support risk management activities and participate in customer meetings and design reviews.

Skills

Cybersecurity governance

Risk management

Security controls mapping

Regulatory compliance

Threat modeling

Job description

• Develop, maintain, and improve cybersecurity governance processes, standards, procedures, templates, and technical guidance.
• Analyze customer, contractual, regulatory, and internal cybersecurity requirements and translate them into actionable system and engineering requirements.
• Map technical and operational security controls to applicable frameworks, primarily NIST SP 800-53, as well as NIST CSF, DISA STIGs, CIS Benchmarks, ISO 27001, and other applicable customer or industry requirements.
• Develop and maintain System Security Plans (SSPs), security assessment reports, control implementation summaries, risk assessments, risk matrices, security procedures, and related cybersecurity documentation.
• Maintain traceability between customer requirements, system requirements, implemented security controls, verification activities, and supporting evidence.
• Support cybersecurity risk management activities including risk identification, analysis, treatment, acceptance, and residual risk documentation.
• Participate in customer cybersecurity meetings, design reviews, audits, assessments, and approval activities.
• Assist engineering teams in interpreting cybersecurity requirements and determining practical implementation approaches.
• Perform cybersecurity assessments of systems, subsystems, COTS products, software, and embedded components.
• Support threat modeling, attack-surface analysis, security architecture reviews, and security design activities.
• Review network architectures, interfaces, data flows, trust boundaries, segmentation, authentication mechanisms, logging, and security controls.
• Support Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), customer deployments, onsite assessments, and other cybersecurity project activities when required.
• Contribute to cybersecurity process improvement, standardization, training, knowledge transfer, automation, and development of reusable security artifacts.
• Maintain awareness of evolving U.S. cybersecurity regulations, standards, customer requirements, and industry best practices.
• Support the broader cybersecurity organization as priorities, programs, and customer requirements evolve.