Cybersecurity Engineer
Are you passionate about human space exploration, understanding the origins of the universe, and working with a passionate and diverse team to make a difference? We need your talent, teamwork, and energy to help us achieve great things that inspire people all over the globe. Bring creative ideas and diverse backgrounds to help us envision, shape, and deliver systems that will enable the exploration of space while benefiting people here on Earth.
About the role
The Cybersecurity Engineer will support NASA’s pursuits in deep space exploration as part of the JETSII Contract.
Responsibilities
- Conduct cyber threat modeling, identifying critical trust boundaries and correlating them to risk based on adversarial tactics and techniques.
- Perform gap analysis and risk-based assessment using NASA risk management plan to derive potential risks due to cyber threats and system vulnerabilities.
- Develop briefing material regarding cybersecurity and cyber operations activities with an ability to articulate information at a senior leader level (SES civil servant).
- Collaborate across agency to engage system security efforts for both terrestrial and space-based assets, including the use of hybrid government-commercial industry technologies.
- Be responsible for system design requirements from programmatic to technical level including verification and validation details.
- Provide engineering analysis and technical consultation for the development, design, testing, and evaluation of spacecraft systems, software, hardware, and cybersecurity.
- Provide technical guidance, oversight, and resolution of issues related to Multiple-System Domains (Software and Networks) for NASA projects and programs.
- Perform cybersecurity impact assessments.
- Communicate effectively with internal and external customers.
- Coordinate with external organizations to perform cybersecurity remediation.
- Operate successfully in a fast-paced cyber systems environment supporting rapid evaluation for Cybersecurity related Risks.
- Demonstrate strong customer focus, effective communication skills, and the ability to work in a dynamic, schedule-driven environment.
- Perform other duties as assigned.
Requirements
- Bachelor’s degree or equivalent certification in a related area and a minimum of 5 years of experience in the field or in a related area.
- Eligibility for U.S. Government Top Secret security clearance.
- Experience developing data flow diagrams.
- Experience using MITRE ATT&CK, Aerospace SPARTA, D3FEND or similar frameworks for analyzing cyber tactics and techniques or similar threat analysis frameworks.
- Experience developing cyber threat models for assessing systems.
- Experience with risk management frameworks and assessing cyber risk.
- Familiarity with anomaly detection and response systems like SIEM.
- Experience presenting cyber operations/technologies briefs to non-technical and technical audiences.
- Experience in Avionics Electrical or Software Systems design and development.
- Experience performing cybersecurity impact assessments and remediation.
- Familiarity with cybersecurity controls and requirements such as NIST SP 800-53: Recommended Security Controls for Federal Information Systems.
- Experience with network design, network management tools, IT security, and network troubleshooting techniques.
- Familiarity with commercial products used in computer networking technology.
- Excellent communication, negotiation, and coordination skills, with a strong customer service mindset.
Preferred Qualifications
- Familiarity with AI/ML as it pertains to AI-security.
- Experience with Kali Linux, Metasploit, Wireshark, and other similar security tools.
- Familiarity with NPR 7150.2D and CLD-REQ-1130 especially as it relates to cybersecurity for software.
- Experience developing systems requirements including verification and validation details.
- Familiarity with CCSDS for space communications.
- Knowledge of NASA NPR 2810.1A: Security of Information Technology.
- CompTIA Security+ - Baseline DoD 8570/8140 IAT Level II.
- Thorough understanding of computer networking technologies, including IEEE 802.3 (Ethernet) standards.
- Experience with hardware and software integration.
- Experience in cybersecurity planning, auditing, and vulnerability scanning.
- Experience with avionics cybersecurity system maintenance (e.g., disabling services, implementing countermeasures, intrusion detection, firewall configuration).
- Experience with spacecraft avionics, networks and flight software analysis.
- Experience applying computer network technology in space systems.
- Familiarity with ARINC 664 Part 7 Aircraft Data Network.
- Familiarity with SAE AS6802 Time-Triggered Ethernet Standard.
Benefits
- Health, dental, and vision insurance.
- Paid time off and holidays.
- Retirement benefits (including 401(k) matching).
- Educational reimbursement.
- Parental leave.
- Employee stock purchase plan.
- Tax-saving options.
- Disability and life insurance.
- Pet insurance.
Schedule
- 9/80 work schedule (every other Friday off), when applicable.
Pay
Compensation range varies based on job responsibilities, education, experience, skills, internal equity, market data, and applicable laws. Positions may be governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts.
Proof of U.S. Citizenship or US Permanent Residency may be a requirement for this position. Must be able to complete a U.S. government background investigation. Management has the prerogative to select at any level for which the position is advertised.