Cybersecurity Engineer, Air Traffic Control Systems - Frederick, MD

Responsibilities

• Perform detailed cybersecurity assessments of ATC systems, subsystems, and COTS components.
• Map component level controls to applicable cybersecurity frameworks, primarily NIST SP 800 53, as well as complementary frameworks (e.g., NIST CSF, ISO 27001, or aviation specific guidelines when applicable).
• Identify deficiencies, evaluate risk impact on safety critical functions, and define remediation recommendations.
• Produce assessment reports, risk matrices, and control implementation summaries.
• Contribute to the creation, documentation, and maintenance of System Security Plans for ATC systems across their life cycle.
• Describe system boundaries, data flows, interfaces, security controls, operational environments, and residual risks.
• Ensure consistency with regulatory, customer, and internal compliance requirements.
• Collaborate with systems engineering and certification teams to prepare security deliverables for audits and approval processes.
• Design secure architectures for ATC systems, addressing confidentiality, integrity, availability, traceability, and resilience.
• Define system level and component level security controls, zoning concepts, segmentation, and protective monitoring strategies.
• Produce architecture diagrams, security models, and interface control documents.
• Align solutions with aviation safety critical constraints, real time performance requirements, and applicable cybersecurity policies.
• Support R&D and engineering teams by translating security requirements into actionable engineering tasks.
• Review system designs, prototypes, and interfaces for compliance with security standards.
• Provide guidance on closing identified security gaps through secure coding practices, architectural changes, or control enhancement.
• Communicate complex cybersecurity concepts in a clear, engineering-friendly manner.