Cybersecurity Specialist

Avion Solutions, Inc.; Huntsville (AL); On-site; USD 120,000 - 160,000; Full time

Job summary

Avion Solutions, Inc. in Huntsville, AL, is seeking a Cybersecurity Specialist to support the Fixed Wing Project Office (FWPO). You will embed RMF requirements into the engineering design process and manage RMF authorization packages to secure ATO for ISR/test platforms.

Required are 10+ years in cybersecurity within aviation, DoD STIG/IAT II, and eMASS/NIST SP 800-53/CNSSI 1253 experience, with up to 15% travel.

Qualifications

• Bachelor's degree in engineering or related technical discipline with 10+ years in cybersecurity.
• Experience embedding RMF requirements into aircraft system designs and managing ATO processes.
• Familiarity with NIST SP 800-53/CNSSI 1253 and eMASS.

Responsibilities

• Serve as the primary cybersecurity specialist embedding RMF into engineering design processes.
• Oversee RMF authorization packages and ATO for ISR/test platforms using eMASS.
• Lead system lifecycles with CNSSI 1253 controls for CRN-deployed ISR systems.
• Develop and manage POA&Ms for non-compliant controls with engineering teams.
• Provide cybersecurity guidance during integration/testing of sensors, datalinks, and mission systems on FAA-certificated aircraft.
• Coordinate with external test organizations for CTT, CDT, and CVPA events on fixed-wing platforms.
• Maintain security posture of SILs and simulation environments for pre-flight testing.
• Other duties as assigned.

Skills

RMF implementation

Aircraft cybersecurity

DoD security mindset

Education

Bachelor's degree in engineering or related technical discipline

Master's degree (preferred)

Tools

eMASS

NIST SP 800-53/CNSSI 1253

STIGs (DoW)

Job description

Avion Solutions Inc., a 100% employee-owned company, is seeking candidates for a Cybersecurity Specialist to support the Fixed Wing Project Office (FWPO). This position is located in Huntsville, AL.

Job Responsibilities/Duties

• Serve as the primary cybersecurity specialist while supporting aircraft systems engineers, software developers, and systems architects to embed RMF requirements directly into the engineering design process.
• Oversee the development, maintenance, and submission of RMF authorization packages utilizing the eMASS compliance tool to secure and maintain ATO for aviation Intelligence/Surveillance/Reconnaissance (ISR) and test platforms.
• Lead system lifecycles, to include self-assessments against NIST SP 800-53/CNSSI 1253 security controls tailored for Closed Restricted Networks (CRN), tactically deployed ISR systems.
• Develop and manage Plans of Action and Milestones (POA&Ms) for non-compliant controls, coordinating with engineering teams to implement mitigation strategies during platform integration.
• Provide cybersecurity guidance during the integration and testing of new sensor payloads, datalinks, and mission systems onto Federal Aviation Administration (FAA) certificated aircraft.
• Coordinate with external test organizations (DOT&E, Blue Teams, etc.) to execute Cyber Tabletop (CTT), Cyber Development Testing (CDT), and Cooperative Vulnerability and Penetration (CVPA) events on various fixed-wing aircraft platforms.
• Oversee and maintain the security posture of SILs and simulation environments used for pre-flight software testing and vulnerability discovery.
• Other duties as assigned.

Required Experience

• Bachelor's Degree (engineering or related technical discipline) and 10+ years of relevant cybersecurity experience, preferably in aviation platforms.
• Experience with implementing and evaluating DoW Security Technical Implementation Guide (STIG) requirements, NIST RMF, IAVMs, and cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer).
• Must have prior experience embedding Risk Management Framework (RMF) requirements into aircraft system designs and have a background in managing and advancing RMF authorization packages through the Authority to Operate (ATO) process.
• Experienced with NIST security controls and the Enterprise Mission Assurance Support Service (eMASS).
• Must demonstrate knowledge of NIST SP 800-53/CNSSI 1253 and work with Program Managers, Original Classification Authority (OCA), and Systems Security Engineers (SSE).
• Knowledge of information system architecture and standards as they apply to cybersecurity.
• Knowledge of confidentiality of information, privacy protection, data security, and other information security issues that are important in a DoW-regulated industry.
• Experienced with all forms of information technology security, policy writing, auditing, compliance, and creating, maintaining, and auditing IT security controls and procedures.
• DoW 8570 IAT or IAM Level II certification.
• Must be a U.S. citizen and have the ability to obtain/maintain a DoW security clearance.
• Must be able to travel up to 15% of the time.

Preferred Qualifications

• Master's Degree.
• 8570 IAT or IAM level III preferred (i.e., CISSP, CISA, CASP, GSLC, CAP, CASP, CISM, CEH).
• Experience in a DoW security environment preferred.
• Experience in systems, network, and endpoint security.
• Excellent knowledge of information security technology, such as firewalls, Intrusion Detection Systems (IDS), Intrusion Detection and Prevention Systems (IPDS), and anti-malware.

Equal Opportunity

Avion Solutions, Inc. reaffirms its belief in equal employment opportunity for all employees and applicants. Avion Solutions, Inc. is an Equal Employment Opportunity Employer and a VEVRAA-governed Federal Contractor that affords equal employment opportunity to protected veterans and people with disabilities. Avion Solutions, Inc. provides all employees and job applicants equal employment opportunities in hiring and promotion without regard to age, sex, sexual orientation, marital status, race, religion, color, veteran status, genetic information, physical or mental disability, national origin, or any other reason prohibited by law.