Senior/Lead Product Cybersecurity Engineer

Jobtailor; Everett (WA); On-site; USD 150,000 - 210,000; Full time

Job summary

Jobtailor in Everett, WA seeks a senior security engineer to lead secure system solutions for aerospace products. You will align with industry and government standards to ensure secure design and ongoing compliance.

You will oversee risk assessments, define security requirements with stakeholders, coordinate testers, and maintain regulatory compliance across airworthy models. Strong cybersecurity, embedded systems security, and communications to diverse audiences are essential.

Qualifications

• Bachelor of Science degree in engineering, engineering technology, chemistry, physics, mathematics, data science, or computer science.
• 14+ years of related work experience for Level 5 or 9+ years for Level 4 with equivalent education.
• Experience in systems engineering, software/hardware security, and cyber defense.

Responsibilities

• Lead development of secure technical solutions with team involvement.
• Perform risk, threat, and vulnerability assessments to ensure security integrity and compliance.
• Coordinate and define system security requirements with stakeholders.
• Review technical data and documentation per security processes for internal/external delivery.
• Coordinate security testers to validate coverage and impacts of analysis.
• Collaborate with external customers and internal teams on detection capabilities.
• Lead sustainment program to ensure product security, safety, and resiliency of aircraft models.
• Advise on configuration management and security of facilities, tools, data, networks.

Skills

Cybersecurity expert

Security architecture

Technical presentation

Regulatory knowledge

Education

B.S. in Engineering/CS/Data Science/Math

Job description

Responsibilities

• Leads the development of effective and/or innovative technical solutions with an awareness of consequences of judgements individually and through teams.
• Leads risk, threat, and vulnerability assessments of the product assets and production systems in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance.
• Leads development and coordination of system security requirements with different system stakeholders.
• Reviews technical data and documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery.
• Coordinates and advises security testers to validate coverage and impacts to analysis.
• Coordinates with external customers and internal stakeholders on detection capabilities in alignment with continued airworthiness strategies.
• Leads the development, implementation, and communication of the sustainment program to ensure continued product security, safety, and resiliency of digitally-connected, in-service airplane models.
• Advises and checks configuration management and security of facilities, equipment, tools, data, networks, and resources used to ensure continued product security and resiliency of in-service models.

Requirements

• Bachelor of Science degree from an accredited course of study in engineering, engineering technology, chemistry, physics, mathematics, data science, or computer science
• Level 4: 9+ years of related work experience or an equivalent combination of education and experience
• Level 5: 14+ years of related work experience or an equivalent combination of education and experience
• 5+ years of related work experience in systems engineering, systems integration, software engineering, electrical engineering, certification, network security, and/or cybersecurity
• Security certification is desired: DoD 8570.01M / DoDD 8140.01 certification at IASAE Level II or higher (such as Security+ CE, GSEC, SSCP, CISSP, CISA, CCNA-Security)
• Working knowledge in systems, engineering, systems integration, airplane systems, and/or airplane certification
• Experience in cybersecurity, security network architecture, embedded systems security, security testing and evaluation, network design, cyber physical systems or PKI infrastructure
• Experience planning and executing penetration tests in Windows and Linux Operating Systems, IP-based networks, web applications, avionics, embedded systems, non-standard ethernet protocols (ARINC, etc.)
• Experience with hardware and firmware security
• Experience coordinating and presenting technical content to a variety of technical and non-technical audiences
• Possess one or more security certifications, including but not limited to: CISSP; Security+; CEH; CCNA; UNIX/LINUX System Administration; GIAC GPEN, GWAPT, or GXPN; Offensive Security Certified Engineer (OSCE); Offensive Security Certified Professional (OSCP)