Cybersecurity Specialist

• Serve as the primary cybersecurity specialist while supporting aircraft systems engineers, software developers, and systems architects to embed RMF requirements directly into the engineering design process.
• Oversee the development, maintenance, and submission of RMF authorization packages utilizing the eMASS compliance tool to secure and maintain ATO for aviation Intelligence/Surveillance/Reconnaissance (ISR) and test platforms.
• Lead system lifecycles, to include self-assessments against NIST SP 800-53/CNSSI 1253 security controls tailored for Closed Restricted Networks (CRN), tactically deployed ISR systems.
• Develop and manage Plans of Action and Milestones (POA&Ms) for non-compliant controls, coordinating with engineering teams to implement mitigation strategies during platform integration.
• Provide cybersecurity guidance during the integration and testing of new sensor payloads, datalinks, and mission systems onto Federal Aviation Administration (FAA) certificated aircraft.
• Coordinate with external test organizations (DOT&E, Blue Teams, etc.) to execute Cyber Tabletop (CTT), Cyber Development Testing (CDT), and Cooperative Vulnerability and Penetration (CVPA) events on various fixed-wing aircraft platforms.
• Oversee and maintain the security posture of SILs and simulation environments used for pre-flight software testing and vulnerability discovery.
• Other duties as assigned.

• Bachelor’s Degree (engineering or related technical discipline) and 10+ years of relevant cybersecurity experience, preferably in aviation platforms.
• Experience with implementing and evaluating DoW Security Technical Implementation Guide (STIG) requirements, NIST RMF, IAVMs, and cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer).
• Must have prior experience embedding Risk Management Framework (RMF) requirements into aircraft system designs and have a background in managing and advancing RMF authorization packages through the Authority to Operate (ATO) process.
• Experienced with NIST security controls and the Enterprise Mission Assurance Support Service (eMASS).
• Must demonstrate knowledge of NIST SP 800-53/CNSSI 1253 and work with Program Managers, Original Classification Authority (OCA), and Systems Security Engineers (SSE).
• Knowledge of information system architecture and standards as they apply to cybersecurity.
• Knowledge of confidentiality of information, privacy protection, data security, and other information security issues that are important in a DoW-regulated industry.
• Experienced with all forms of information technology security, policy writing, auditing, compliance, and creating, maintaining, and auditing IT security controls and procedures.
• DoW 8570 IAT or IAM Level II certification.
• Must be a U.S. citizen and have the ability to obtain/maintain a DoW security clearance.
• Must be able to travel up to 15% of the time., * Master’s Degree.
• 8570 IAT or IAM level III preferred (i.e., CISSP, CISA, CASP, GSLC, CAP, CASP, CISM, CEH).
• Experience in a DoW security environment preferred.
• Experience in systems, network, and endpoint security.
• Excellent knowledge of information security technology, such as firewalls, Intrusion Detection Systems (IDS), Intrusion Detection and Prevention Systems (IPDS), and anti-malware.

Avion Solutions Inc., a 100% employee-owned company, is seeking candidates for a Cybersecurity Specialist to support the Fixed Wing Project Office (FWPO). This position is located in Huntsville, AL.