Cybersecurity Engineer - Columbia, MD

About the role

The Cybersecurity Engineer plays a critical role in safeguarding Air Traffic Control (ATC) system components by performing security assessments, designing compliant security documentation, developing secure system architectures, and supporting R&D teams in closing security gaps. This position requires strong knowledge of aviation system requirements, cybersecurity standards (e.g., NIST 800-53), and system engineering practices within safety-critical environments in IP networking / VoIP / RF communications.

Responsibilities

• Perform detailed cybersecurity assessments of ATC systems, subsystems, and COTS components.
• Map component-level controls to applicable cybersecurity frameworks, primarily NIST SP 800-53, as well as complementary frameworks (e.g., NIST CSF, ISO 27001, or aviation-specific guidelines when applicable).
• Identify deficiencies, evaluate risk impact on safety-critical functions, and define remediation recommendations.
• Produce assessment reports, risk matrices, and control implementation summaries.
• Contribute to the creation, documentation, and maintenance of System Security Plans for ATC systems across their life cycle:
  • Describe system boundaries, data flows, interfaces, security controls, operational environments, and residual risks.
  • Ensure consistency with regulatory, customer, and internal compliance requirements.
• Collaborate with systems engineering and certification teams to prepare security deliverables for audits and approval processes.
• Design secure architectures for ATC systems, addressing confidentiality, integrity, availability, traceability, and resilience:
  • Define system-level and component-level security controls, zoning concepts, segmentation, and protective monitoring strategies.
  • Produce architecture diagrams, security models, and interface control documents.
  • Align solutions with aviation safety-critical constraints, real-time performance requirements, and applicable cybersecurity policies.
• Work closely with the product engineering teams based in Europe and North America.
• Support R&D and engineering teams by translating security requirements into actionable engineering tasks.
• Review system designs, prototypes, and interfaces for compliance with security standards.
• Provide guidance on closing identified security gaps through secure coding practices, architectural changes, or control enhancement.
• Communicate complex cybersecurity concepts in a clear, engineering-friendly manner.

Requirements

• BS degree in Computer Science, Engineering, or related field. Master's preferred.
• 10+ years of experience.
• Strong understanding of NIST SP 800-53 and related cybersecurity and risk management frameworks.
• Proficient in Atlassian products (Jira, Confluence).
• Experience in developing System Security Plans or similar regulatory documentation.
• Solid knowledge of system security architecture design, including secure networks, communication protocols, and system modeling.
• Familiarity with safety-critical or real-time systems, preferably within aviation, transportation, or defense.
• Ability to perform structured security assessments and threat modeling.
• Experience collaborating with cross-functional engineering and R&D teams.
• Strong analytical, documentation, and technical communication skills.
• Familiarity with IP networking, VoIP, and RF communications or similar.
• Must reside in the US, have US citizenship, and be able to obtain US Government Public Trust Security Clearance.

Preferred Qualifications

• Experience in the aviation domain (ATC).
• Understanding of regulatory ecosystems such as EUROCONTROL, ICAO, EASA.
• Certifications such as CISSP, GSEC, GCSA, or similar.
• Experience with model-based systems engineering (MBSE) tools such as Cameo, Capella, or Enterprise Architect.
• Knowledge of risk assessment methodologies (FTA, FMEA, TARA, etc.).

Pay

The total compensation for this position is $97K-$140K. Total compensation includes base salary, variable pay (when applicable) plus benefits. The range is determined by the position, geographic location, and level. Individual pay within the range is determined by several factors including location, education or training, relevant work history, sales incentive structure, and job-related skills.

Benefits

• Flexible working hour models
• Training & continuing education
• Privately owned company
• Promoting innovation
• Long-term & attractive work environment