Security Engineer - National Airspace Systems

Noblis; Hartford (CT); On-site; USD 71,000 - 240,000; Full time

Job summary

Noblis is seeking an Information Systems Security Engineer/Analyst to support FAA systems, assuring security planning, risk management, C&A, and control implementation throughout SDLC. Collaboration with engineering, program, and operations teams is essential to ensure secure design, development, testing, and operation.

The role emphasizes security documentation (SSP/POA&M), compliance with FAA directives and NIST standards, and applying expertise across security domains to sustain secure

Qualifications

• Experience in information systems security, cybersecurity, or security engineering.
• Familiarity with NIST security frameworks (NIST 800-53).
• Experience developing and maintaining security documentation (SSP, POA&M, risk assessments).
• Ability to analyze system vulnerabilities and recommend security controls.
• Strong written and verbal communication skills.

Responsibilities

• Provide information systems security analysis, design support, and implementation assistance.
• Conduct system engineering studies and security assessments.
• Identify security risks, vulnerabilities, and threats, and recommend mitigation strategies.
• Perform preliminary vulnerability testing early in the system development life cycle.
• Analyze security impacts of system changes and modifications.

Skills

Information systems security

Cybersecurity

Security engineering

NIST 800-53

Communication skills

Team collaboration

Vulnerability analysis

Education

Bachelor's degree in Engineering

Job description

Noblis is seeking an Information Systems Security Engineer/Analyst to support FAA systems, assuring security planning, risk management, C&A, and control implementation throughout SDLC. Collaboration with engineering, program, and operations teams is essential to ensure secure design, development, testing, and operation.

The role emphasizes security documentation (SSP/POA&M), compliance with FAA directives and NIST standards, and applying expertise across security domains to sustain secure