The Ranger Group, a leading US Engineering Solutions provider to companies across the Aerospace & Defense, Medical Device, Electronics and Industrial Manufacturing industries, is currently seeking a Product Cyber Security Engineer for a Full-time role with a leading Aerospace & Defense company in the Fort Worth area. This role will require work to be completed 100% Onsite.
There are openings for Product Cyber Security Engineers ranging from Senior Engineers to Principal Engineers and above to support Aircraft Cyber Security Compliance and Analysis.
In these critical Cyber Security roles, you will join the Future Vertical Lift (FVL) V280 team focusing on Compliance and Analysis of airborne cyber security artifacts (RMF documentation and contract deliverables (which includes MBSE modeling).
You will ensure our next-generation tiltrotor aircraft meet all aspects of compliance thereby producing a cyber resilient and survivable platform. You will engage in this fast-paced program through collaborating in cross-functional groups, process development and adherence throughout the product lifecycle, while ensuring the cyber security aspects remain aligned with customer and regulatory requirements.
You may be deriving and allocating aircraft architecture design requirements, architectural analysis, and model-based systems engineering (MBSE) implementation utilizing CAMEO. Threat modeling exercises using various methodologies (STRIDE, STPA, STPA-Sec) to include cyber tabletops.
Compliance driven programs require DoDI 8510.01/8500.01 Risk Management Framework (RMF) certification for military platforms, and your work will include process development and documentation, threat management, mitigation, and the implementation of all applicable controls. You will serve as a liaison for various engineering functions and review/validate/remediate the impact all design changes to existing and in-development platforms.
Cyber Security Certifications Required:
- For a Senior Engineer role: you should possess or obtain within 6 months of hire a DoD 8570 IAM or IAT Level I certification at a minimum (i.e., Security+ CE, CAP, CSSLP, etc..).
- For a Principal Engineer or higher role: you should possess a DoD 8570 IAM or IAT Level III certification at a minimum (i.e., CISSP, CISM)
Education and Skills You Bring To this Role:
- Bachelor’s Degree is required in a technical discipline (Electrical/Electronic Engineering (EE), Electronic Engineering in Technology (EET), Computer Science, and/or Cyber Security or similar technical bachelor’s degree).
- Multiple levels of experience in cybersecurity will be considered with a minimum of 2 years of experience, and we greatly prefer those with at least 6 years or more of DoD RMF / DIACAP accreditation experience and the Authority to Operate (ATO) Process.).
- At least familiarity with NIST SP 800-37/53/160v2 RMF publications, but greatly prefer those with have in depth knowledge of NIST SP800 standards.
- At least familiarity with and greatly prefer those who have generated SCTMs, POAMs, Risk Assessments, SSP, and Security Assessments
- Ability to work in a collaborative technical environment and negotiate design and cyber security technical trade-offs with Integrated Product Teams (IPTs) and throughout the organization.
- The ability to develop and communicate product cyber security requirements and perform residual risk assessments in accordance with the company's product cyber security policies and methods is required.
- Familiarization with DoD Cyber Survivability Endorsement Implementation Guide (CSEIG)
- Experience and/or familiarity with one or more areas: attack trees, tabletops, threat modeling, architectural design analysis, digital signing, software authenticity, root of trust systems, plus threat and vulnerability analysis.
- Ability to obtain and maintain a DoD Secret level clearance.
What You Need to Be Successful:
- We are looking for inquisitive and driven engineers with a passion to innovate.
- Strong logical, analytical, and communication skills are required.
- Ability to prioritize work, strong analytical and problem-solving skills with a team player mindset.
- Ability to create plans, procedures, and briefing material(s) for program presentations to USG.