Bachelor's in Cyber Security or related STEM field, or equivalent experience (5 years in aerospace or military Cybersecurity)
Familiarity with NIST 800-53 controls and Development Security operations
5+ years of Project Management experience leading complex programs
Extensive experience in RMF implementation and defensive Cyber operations
Proven ability to manage complex initiatives in fast-changing environments
Effective verbal and written communication across multiple leadership levels
Strong problem-solving skills and quality/process improvement focus.
Responsibilities
Ensure cybersecurity for aerospace products throughout their lifecycle.
Develop methods for hardware security event detection and PCB analysis.
Reverse engineer firmware and develop exploits as needed.
Create and maintain System Security Plans and related security artifacts.
Serve as a conduit between Cyber and Space Engineering teams for risk management.
Coordinate with compliance and legal teams to ensure regulatory adherence.
Build partnerships within the industry for product development and improvements.
Benefits
Competitive employee benefits package
Opportunities for individual career growth and development
Inclusive and diverse work environment
Flexible working locations in Arlington or Herndon, VA
Engaging staff culture with a focus on mission success.
Full Job Description
Multiple Locations Available: Arlington, VAor Herndon, VA
Position Summary:
Airbus US is looking for a Cyber Security Product Risk Manager who works with specialists from the Cyber, Space Engineering, and Contracts departments to ensure our products meet the applicable hardening requirements with a view that cyber risks are identified and controlled during the entire product life cycle. The products include Spacecraft and associated ancillary components.
Primary Responsibilities:
Responsible for the Cyber security of our products.
Develop methodology to detect security events on hardware, including PCB analysis, and debug port detection.
Extract and reverse engineer firmware, exploit development.
Knowledge of Space BUS architecture, Secure boot
Production of System Security Plan (SSP). These artifacts include - a System Security Plan (SSP), Risk Assessment Report, Security Controls Traceability Matrix, and Plans of Actions & Milestones (POA&Ms). Familiarity with the NIST 800-53 controls (as applied through CNSSI-1253).
Working as an individual contributor representing the Cyber team within the Space engineering team to architect, implement, and execute Risk Management Framework (RMF) CyberSecurity, CyberResilience, Cyber Survivability requirements of satellite systems, onboard computers, and flight software.
All candidates must be capable of supporting cybersecurity assessment events where they work closely with systems administrators and other cyber personnel and engineering personnel (ISSOs, ISSMs,) to satisfactorily demonstrate that all applicable security controls are implemented within the system boundary.
Proactively engages with Compliance and Legal to ensure adherence with all external and internal compliance and regulatory requirements.
Establishes strategic peer-to-peer partnerships with suppliers, manufacturers, and other industry experts in order to develop new products or improve existing products while ensuring that applicable boundaries/firewalls are respected.
Manages multiple product and capability initiatives to drive clear prioritization and direction to cross-functional teams including Cyber Security, and Space Engineering from Airbus US as well as key client representatives.
Provides leadership and serves as the escalation point for all issues arising across functional teams in assigned workstreams.
Provide updates to senior leaders and other internal and external stakeholders on integration project statuses on a regular basis.
Actively seeks and gathers customer/stakeholder feedback and applies is to product development as appropriate.
Develop business opportunities through peer-to-peer relationships with industry influencers and government decision-makers.
Other projects as assigned
Primary Qualifications:
Education:
Bachelor's Degree in stem field (Cyber security, Electrical engineering, Aeronautical engineering, Aerospace Engineering) or equivalent experience (5 years Cybersecurity experience in the aerospace industry or military).
Experience:
Familiarity with the NIST 800-53 controls (as applied through CNSSI-1253) and Development Security operations.
Extensive experience of RMF implementation and defensive Cyber operations
Minimum of 5 years Project Management experience that includes:
Leading large complex programs over multiple releases
A proven track record of launching new products or applications with demonstrated business impact
Ability to influence and coordinate multi-functional teams
Qualifications:
Demonstrated experience of effective verbal and written communication skills across functions and multiple levels of leadership
Demonstrated ability to manage complex initiatives and projects in a matrixed, high-speed, and quickly changing business environment.
Outstanding communication, relationship-building influencing, and collaboration skills.
Demonstrated strong quality/process improvement experience, with relevant examples that improved business performance and customer experience
Advanced problem-solving skills with the ability to develop innovative solutions in a fast-changing environment.
Communication Skills (Spoken, Written, Influencing, Proficiency in Other Languages):
Excellent communication skills, both verbal and written.
Fluent U.S. English speaker
Technical Systems Proficiency:
Requires advanced computer skills with a focus on Microsoft Office applications.
Travel Required:
Up to 25% travel
Eligibility:
US citizenship is required
Clearance:
Ability to obtain and maintain a Government security clearance at the facility clearance level
