Top Aerospace Cybersecurity Jobs

Leads cybersecurity compliance and risk management for classified and unclassified systems. Develops and maintains ATO packages, conducts risk assessments, vulnerability management, audit log analysis, SIEM tuning, continuous monitoring, and incident response. Creates security policies, documentation, and compliance reports; supports audit readiness and data-spillage cleanup. Advises leadership, collaborates with technical teams, interfaces with government agencies, and ensures compliance with NIST, RMF, DoD, JSIG, and AFIC requirements.

Lead design, implementation, and maintenance of Identity Governance & Administration (IGA) solutions. Manage provisioning, entitlement reviews, access certification, workflows, and integrations (SailPoint, Saviynt, ForgeRock). Collaborate with stakeholders, vendors, and auditors to ensure compliance (SOX, PCI-DSS), automate provisioning, troubleshoot platform issues, mentor junior analysts, and improve IAG processes and adoption across the organization.

Designs, deploys, and secures Microsoft Windows infrastructure for customer environments. Responsibilities include Active Directory and Group Policy management, Windows hardening, RBAC and least-privilege implementation, endpoint protection deployment, security assessments, remediation, patch processes, documentation, and customer knowledge transfer. The role requires extensive Windows security experience and may involve up to 30% travel.

The GRC Engineer will build and automate governance, risk, and compliance programs across cloud, CI/CD, and SaaS environments. Responsibilities include continuous controls monitoring, SOC 2 and CMMC compliance, audit preparation, evidence collection, risk assessments, policy development, access reviews, vendor risk management, remediation tracking, and customer security due diligence. The role partners closely with Security and Engineering leaders and may develop scripts and tooling to automate compliance processes.

Manages security activities for designated program offices, integrating security into business capture, proposals, and program execution. Oversees NISP activities, classified-program compliance, contractual security documentation, security classification guides, secure-area administration, employee training, and regulatory procedures. Coordinates with government agencies, customers, suppliers, leadership, program teams, and business development to interpret requirements, resolve compliance issues, and tailor security programs to organizational needs.

Deploys, secures, accredits, and operates classified IT environments supporting U.S. government missions. Maintains CWAN, DISN, SIPR, and JWICS networks, classified workstations, peripherals, endpoints, identity systems, and office infrastructure. Partners with the ISSM and Facility Security Officer to ensure secure, reliable operations across Secret and SCI environments. Owns system reliability, patching, documentation, user support, automation, and compliance while enabling fast access for distributed engineering and operations teams.

Engineer cybersecurity for Navy control systems and platform IT supporting an electronic warfare system. Responsibilities include integrating security clients on Red Hat Enterprise Linux servers, writing Linux scripts, hardening Linux and Windows systems, conducting security scans, patching third-party software, managing vulnerabilities, and performing verification testing. The role is fully on-site in Syracuse, NY and requires U.S. citizenship and an active Department of Defense Secret clearance.

Reverse engineer compiled software and firmware using static and dynamic analysis, disassembly, debugging, tracing, and emulation. Develop Python and C/C++ tools for automation, instrumentation, telemetry collection, and hypothesis validation. Analyze embedded systems, interfaces, protocols, and algorithms; document findings in technical reports; and collaborate with engineering teams supporting electronic warfare testing and evaluation.

Supports DoD cybersecurity compliance, Risk Management Framework activities, assessment and authorization, vulnerability management, continuous monitoring, and security documentation. Maintains SSPs, POA&Ms, system inventories, authorization packages, and eMASS records. Uses ACAS, DISA STIGs, and SCAP tools to assess systems, coordinate remediation, validate corrective actions, and support inspections. Reviews configuration changes, security logs, incidents, and deployment activities while coordinating with government cybersecurity personnel and technical teams. The role is on-site in Lexington Park, Maryland, with up to 10% travel.

Protect enterprise systems by conducting security and vulnerability assessments, monitoring alerts, investigating incidents, supporting audits and remediation, administering cybersecurity technologies, performing threat hunting, strengthening security controls, and maintaining governance documentation. The role collaborates with IT Operations and researches emerging security technologies, frameworks, and threats.