Cybersecurity Engineer - Columbia, MD

Perform detailed cybersecurity assessments of ATC systems, subsystems, and COTS components. Map component‑level controls to applicable cybersecurity frameworks, primarily

NIST SP 800

‑53, as well as complementary frameworks (e.g., NIST

CSF, ISO

27001, or aviation‑specific guidelines when applicable). Identify deficiencies, evaluate risk impact on safety‑critical functions, and define remediation recommendations. Produce assessment reports, risk matrices, and control implementation summaries. Contribute to the creation, documentation, and maintenance of System Security Plans for ATC systems across their life cycle. - Describe system boundaries, data flows, interfaces, security controls, operational environments, and residual risks. Ensure consistency with regulatory, customer, and internal compliance requirements. Collaborate with systems engineering and certification teams to prepare security deliverables for audits and approval processes. Design secure architectures for ATC systems, addressing confidentiality, integrity, availability, traceability, and resilience. Define system‑level and component‑level security controls, zoning concepts, segmentation, and protective monitoring strategies. Produce architecture diagrams, security models, and interface control documents. Align solutions with aviation safety‑critical constraints, real‑time performance requirements, and applicable cybersecurity policies. Support R D and engineering teams by translating security requirements into actionable engineering tasks. Review system designs, prototypes, and interfaces for compliance with security standards. Provide guidance on closing identified security gaps through secure coding practices, architectural changes, or control enhancement. Communicate complex cybersecurity concepts in a clear, engineering‑friendly manner.