Aerospace Cybersecurity Specialist – Control Systems

The Senior Aerospace Cybersecurity Specialist leads the strategy, architecture, and implementation of cybersecurity solutions for control systems in advanced aerospace platforms. This includes ensuring airworthiness, safety, and resilience of critical flight, propulsion, and avionics systems against evolving cyber threats. The role involves collaborating with multidisciplinary teams, guiding compliance with global aerospace cybersecurity regulations, and mentoring engineering staff.

Key Responsibilities:

• Cybersecurity Architecture Leadership:
  Design and oversee secure system architectures for embedded control systems, balancing real-time performance with security requirements.

• Threat Modeling & Risk Management:
  Lead threat and risk assessments using methodologies such as TARA (Threat Analysis and Risk Assessment), STRIDE, and attack trees.

• Strategic Cybersecurity Planning:
  Develop and implement long-term cybersecurity roadmaps across multiple programs, aligning with corporate and regulatory objectives.

• Regulatory Compliance Oversight:
  Ensure full adherence to standards including DO-326A, DO-355A, DO-356A, FAR 25.1316, and NIST SP 800-53. Interface with certifying authorities (FAA, EASA).

• Secure Development Lifecycle (SDL):
  Integrate cybersecurity best practices into product development lifecycles from design through deployment and sustainment.

• Technical Oversight of Testing & Validation:
  Guide cybersecurity testing activities, including penetration tests, red teaming, static/dynamic code analysis, and HIL/SIL test validation.

• Mentorship & Team Development:
  Mentor junior and mid-level engineers, build cybersecurity capability within engineering teams, and promote a culture of security-first engineering.

• Vendor & Supply Chain Risk Management:
  Evaluate and ensure the cybersecurity posture of suppliers, subcontractors, and COTS components integrated into control systems.

• Incident Preparedness & Response:
  Develop and test incident response procedures, coordinate forensic readiness plans, and lead post-incident reviews for continuous improvement.

Key Focus Areas:

1. Cyber-Physical Security Integration:
   Ensure robust security for the intersection of cyber systems and physical controls (e.g., flight control computers, engine control units, actuation systems).

2. Mission-Critical Resilience:
   Engineer systems to remain secure and fail-safe under active cyber attack scenarios, with an emphasis on safety-of-flight systems.

3. Cross-Functional Leadership:
   Act as a key cybersecurity representative in systems engineering reviews, certification boards, and product strategy discussions.

4. Advanced Threat Awareness:
   Monitor and respond to advanced persistent threats (APT) and nation-state actors targeting aerospace assets and IP.

5. Policy Development & Standardization:
   Lead the development of cybersecurity engineering policies, reusable security modules, and system-level defense-in-depth standards.

Qualifications:

• Master’s or Bachelor’s degree in Cybersecurity, Electrical/Computer Engineering, or related technical field

• 7+ years of experience in cybersecurity, with 3+ in aerospace or embedded control system environments

• Deep knowledge of cybersecurity standards: DO-326A/DO-355A, NIST SP 800-53/82, ISO/SAE 21434, and/or MIL-STD-882E

• Experience with avionics data buses and protocols (ARINC 429, MIL-STD-1553, AFDX, CAN, RS-422)

• Strong understanding of real-time operating systems (RTOS), secure boot, firmware hardening, and encryption techniques

• Security certifications preferred: CISSP, GICSP, CSSLP, or equivalent

• Experience interfacing with airworthiness and regulatory authorities (e.g., FAA, EASA, DoD)

• Exceptional leadership, communication, and risk analysis skills