Embedded Cyber Security Engineer

Archer; San Jose (CA); On-site; USD 180,000 - 275,000; Full time

Job summary

Archer in San Jose, CA seeks an Embedded Cyber Security Engineer with extensive experience in cybersecurity for safety-critical flight systems. You will shape security planning, risk assessments, and the Security Architecture at both aircraft and ground levels.

The role requires 10+ years in a related field and a BS in a relevant discipline. Familiarity with DO-326/DO-355/DO-356 and ISO27001 is a plus; base pay ranges from $180,000 to $275,000 with competitive compensation.

Qualifications

• 10+ years of experience in a related field.
• BS in Cybersecurity, Electrical Engineering, Computer Engineering, Computer Science, or related degree.
• Hands-on experience through the Full Systems/Software Development Life Cycles in a regulated industry.
• Familiarity with diverse cybersecurity tools (e.g. isograph, CVE database, etc.) and technologies used for the development, testing and analysis of safety critical embedded systems.

Responsibilities

• Be a Cybersecurity Engineer on a world class team with demonstrated expertise in cybersecurity of embedded safety critical flight systems/software/hardware.
• Participate in the definition and documentation of cybersecurity planning, including certification planning and risk management planning.
• Perform cybersecurity assessments and develop threat conditions and scenarios from aircraft hazard assessments.
• Support definition of Security Architecture on Aircraft Level and ground-based Security Architecture (PKI).
• Validate layered security architecture and security controls, including metrics and effectiveness.

Skills

Cybersecurity

Embedded security

Regulated industry

Threat modeling

Communication skills

Education

BS in Cybersecurity/EE/CS

Job description

Archer is an aerospace company based in San Jose, California building an all-electric vertical takeoff and landing aircraft with a mission to advance the benefits of sustainable air mobility. We are designing, manufacturing, and operating an all-electric aircraft that can carry four passengers while producing minimal noise.

Our sights are set high and our problems are hard, and we believe that diversity in the workplace is what makes us smarter, drives better insights, and will ultimately lift us all to success. We are dedicated to cultivating an equitable and inclusive environment that embraces our differences, and supports and celebrates all of our team members.

What you'll do:

• Be a Cybersecurity Engineer on a world class team with demonstrated expertise in Cybersecurity of embedded safety critical flight Systems/Software/Hardware complying with RTCA DO-326B/DO-355A/DO-356A/ISO27001/ASTM F3532-22.
• Participate in the definition and documentation of cybersecurity planning, in particular, security certification planning, definition of the security environment, risk management planning, security verification planning, and continued airworthiness planning.
• Performing of cybersecurity Assessments: Data Flow (including Data and Control Coupling), development of threat conditions and scenarios (based on Aircraft Functional Hazard Assessment) and compilation of Preliminary Security Risk Assessment.
• Support definition of the Security Architecture on Aircraft Level
• Support definition of ground based Security Architecture (e.g. PKI infrastructure)
• Validation of Layered Security Architecture including Common Mode Analysis
• Validation of Security Controls and assessment of their effectiveness (including corresponding metrics)
• Definition of Security Requirements based on identified and architected security measures (controls)
• Oversight of cybersecurity efforts on system level, including platform software, flight controls, motor control, battery management, displays, communication, navigation, surveillance and others.
• Verification of Cybersecurity requirements, either through analysis or Blue Team testing
• Management of Red Team testing efforts
• Implement and maintain cybersecurity documentation, processes, and policies, including supplier cybersecurity audits and assessments.
• Interface with certification authorities to support cybersecurity aspects of certification
• Foster team collaboration, promote and support personal development.

What you need:

• 10+ years of experience in a related field.
• At least a BS in Cybersecurity, Electrical Engineering, Computer Engineering, Computer Science, or related degree.
• Hands-on experience through the Full Systems/Software Development Life Cycles in a regulated industry

Familiarity with diverse cybersecurity tools (e.g. isograph, CVE database, etc.) and technologies used for the development, testing and analysis of safety critical embedded systems.

• A cybersecurity mindset
• Exceptional organizational and communication skills

Bonus qualifications

• Hands-on DevOps experience
• Hands-on Site Reliability experience
• Experience with Supplier Management
• Experience with Agile methodologies
• Proficiency with ISO27000 framework
• Experience with AS9100 quality system
• CISSP Certification

Please note that this job description is intended to provide a general overview of the position and does not include an exhaustive list of responsibilities and qualifications

At Archer we aim to attract, retain, and motivate talent that possess the skills and leadership necessary to grow our business. We drive a pay-for-performance culture and reward performance that supports the Company's business strategy. For this position we are targeting a base pay between $180,000-275,000. Actual compensation offered will be determined by factors such as job-related knowledge, skills, and experience.

Archer is proud to be an Equal Opportunity employer committed to diversity and inclusivity in the workplace. All aspects of employment are decided on the basis of merit, qualifications, and business needs. We do not discriminate based upon race, color, religion, sex, sexual orientation, age, national origin, disability status, protected veteran status, gender identity or any other characteristic protected by federal, state or local laws.

Archer is committed to working with and providing reasonable accommodations to job applicants with physical or mental disabilities, and those with sincerely held religious beliefs. Applicants who may require reasonable accommodation for any part of the application or hiring process should provide their name and contact information to Archer's People Team at [e-mail]. Reasonable accommodations will be determined on a case-by-case basis.

Information collected and processed as part of any job applications you choose to submit is subject to Archer's Candidate Privacy Policy.

Archer is unable to provide work visa sponsorship for this position at the present time.

Archer is proud to be an Equal Opportunity employer committed to diversity and inclusivity in the workplace. All aspects of employment are decided on the basis of merit, qualifications, and business needs. We do not discriminate based upon race, color, religion, sex, sexual orientation, age, national origin, disability status, protected veteran status, gender identity or any other characteristic protected by federal, state or local laws.

Archer Aviation does not engage with external recruiting agencies/individual recruiters with whom it does not have a prior written agreement. Archer reserves the right to make use of any unsolicited resumes that it receives and bears no responsibility for payment of any fees asserted from the use of unsolicited resumes. If you are a recruiting agency or individual recruiter wishing to do business with Archer, please reach out to [e-mail]. All employment processes are managed by the Archer People Team.

Job posting details for Embedded Cyber Security Engineer at Archer in San Jose, California, United States. . ClimateTechList gathers 16,000+ job openings from over 767 climate tech companies and updates them daily.