FAA Security Engineer

Responsibilities

The Federal Aviation Administration (FAA) Voice Switch and Recorder (VS&R) Program Office manages seven different programs that provide critical voice communications and legal recording systems that perform critical, high availability Air Traffic Control (ATC) communications within the FAA's National Airspace System (NAS). The VS&R Program Office is responsible for acquisition of modern Internet Protocol (IP) ATC Voice Communications Systems (VCSs), which includes development of requirements, procurement, verification, validation, testing, implementation and deployment. The VS&R Program Office also manages the full life cycle sustainment and logistics for the existing legacy ATC VCSs that are currently in use throughout the NAS.

The FAA Security Engineer will provide hands-on cybersecurity support to the FAA Security Lead and Technical Team at the William J. Hughes Technical Center for Advanced Aerospace to help FAA achieve security and technical milestones for the procurement, verification, validation, test and deployment of modern IP-VCSs and Air-to-Ground Protocol Converters (APCs). The Security Engineer will provide technical expertise on system implementations used to address security controls and will analyze, investigate and track security risks and / or issues on FAA and vendor systems, using common standards, certifications and methods. The Security Engineer will also utilize system hardening knowledge, Linux skills to generate security artifacts and collaborate with stakeholders from other functional and technical organizations to achieve security authorization for FAA ATC VCS systems and tools.

Required Qualifications

The candidate must possess a Bachelor of Science in Computer Science, Information System Security, Cybersecurity or similar discipline, plus 6-15 years of relevant hands-on experience.

The candidate must possess the following knowledge, skills, and abilities, across all three categories (Linux System Administration, Networking and System Security) :

Linux System Administration :

Robust, hands-on experience on the Linux terminal, writing bash scripts, configuring packages and servers).

Extensive understanding of Linux operating system structure and configuration (e.g. directory structure, device files, network configuration)

Strong experience developing, configuring and using automation tools such as Ansible, Docker, Jenkins, etc.

Networking :

Working understanding of the OSI Model, including hands-on skills and knowledge of system networking, network design, VLAN / subnetting, configuring and managing routers & switches

Knowledge of network protocol interactions

Experience using and understanding network protocol analyzers, such as Wireshark

Understanding of IPv5 addressing, subnetting (IPv6 knowledge a plus)

Experience with firewall configuration

System Security :

Experience with system, port scanning & vulnerability scanning, including hands-on analysis of findings, validation findings are accurate / applicable and remediation of all findings

Working knowledge of security standards, including NIST 800-53, HSPD-23, and ISO 27001

Experience performing system penetration testing to verify security controls are effective.

Familiarity with cryptographic protocols (asymmetric / symmetric ciphers, hashing, key exchange)

From a system procurement perspective, experience documenting security requirements for Statements of Work (SOWs), Contract Data Requirements Lists (CDRLs), and Data Item Descriptions (DIDs)

Desired Qualifications

The candidate should possess some of the following knowledge, skills, and abilities :

Knowledge of the Federal Aviation Administration (FAA)

Knowledge of the FAA National Airspace System (NAS)

Strong logic / reasoning skills (e.g., can understand / analyze requirements, and identify logical gaps)

Experience conducting and participating in technical interchange meetings

Strong, clear verbal and written communication skills

Understanding of C / C++, Python, Golang, or Rust a plus

Usage of version control software (e.g., Git)

Knowledge of software design patterns and anti-patterns

Familiarity with embedded Linux system design and implementation, including performance optimization, is a plus

Understanding of common software data structures and algorithms

Overview

Noblis () and our wholly owned subsidiaries, Noblis ESI , and Noblis MSD tackle the nation's toughest problems and apply advanced solutions to our clients' most critical missions. We bring the best of scientific thought, management, and engineering expertise together in an environment of independence and objectivity to deliver enduring impact on federal missions. Noblis works with a wide range of government clients in the defense, intelligence and federal civil sectors. Learn more at Noblis -About Us ()

Why work at a Noblis company?

Our employees find greater meaning in their work and balance the other things in life that matter to them. Our people are our greatest asset. They are exceptionally skilled, knowledgeable, team-oriented, and mission-driven individuals who want to do work that matters and benefits the public. Noblis has won numerous workplace awards () . Noblis maintains a drug-free workplace.

• Remote / hybrid status is subject to change based on Noblis and / or government requirements

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy / childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.

If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and / or to receive other benefits and privileges of employment, please contact us () .

EEO is the Law () | E-Verify () | Right to Work ()

Total Rewards

At Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits () page on our Careers () site.

Compensation at Noblis is determined by various factors, including but not limited to, the combination of education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract-specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this position is based on full time status. For part time or on-call staff, compensation is proportionately adjusted based on hours worked. While monetary compensation is important, it's just one component of Noblis' total compensation package.

Posted Salary Range

USD $95,500.00 - USD $149,200.00 / Yr.