Top Aerospace Cybersecurity Jobs

Supports cybersecurity engineering for avionics and government systems by assessing risks, developing requirements and controls, designing security architectures, applying NIST controls and STIGs, and supporting certification efforts. The role requires systems thinking, Linux and scripting experience, Cross Domain Solution knowledge, and eligibility for a security clearance. Desired qualifications include C, C++, Java, and Python experience, RMF familiarity, and willingness to travel up to 10%.

Administer and engineer Carbon Black endpoint security and DLP controls across Windows and Linux environments. Responsibilities include policy development, application allow-listing, device control, alert investigation, incident collaboration, platform upgrades, RMF/ATO support, reporting, and documentation. The role requires active TS/SCI clearance with a CI polygraph and supports classified work in a SCIF.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Leads incident detection, response, containment, eradication, recovery, threat hunting, digital forensics, SIEM/SOAR engineering, and MSSP coordination. Develops detection rules, response playbooks, automation workflows, compliance audit processes, and incident documentation. Manages endpoint detection policies, threat intelligence, tabletop exercises, and IR program strategy while communicating risk and incident findings to technical teams, executives, legal, HR, and regulatory stakeholders.

Supports cybersecurity operations across information systems by implementing and monitoring security controls, conducting vulnerability assessments and audits, responding to incidents, maintaining accreditation documentation, and integrating security into DevSecOps and CI/CD pipelines. Provides technical guidance, security training, compliance support, and risk management assistance while coordinating with system owners, cybersecurity leadership, and technical teams.

Manage cloud security across AWS, Azure, and classified environments. Design secure software development practices, automated CI/CD security pipelines, infrastructure-as-code and compliance-as-code solutions, cloud access controls, observability, and container security for Kubernetes and Helm. Support critical applications, participate in Agile delivery, and communicate security findings to stakeholders. The role requires strong DevSecOps experience, networking knowledge, scripting skills, and an active or attainable TS/SCI clearance.

Manage security for classified information systems across their full lifecycle, including accreditation, security controls, SSPs, RMF activities, vulnerability remediation, audits, incident response, insider threat coordination, COMSEC, and TEMPEST/EMSEC compliance. Lead security professionals, coordinate with government agencies, conduct training and self-inspections, and ensure systems meet NIST, DoD, SCI, and related regulatory requirements.

Leads cybersecurity integration for newly acquired sites, including security assessments, firewall and VPN deployment, network segmentation, Zero Trust and Entra ID configuration, EDR and SIEM onboarding, email security, vendor coordination, documentation, and operational handoff. The role independently owns security architecture from assessment through steady-state transition, with approximately 75–80% travel to domestic and international acquisition sites and occasional after-hours or weekend cutovers.

Manage cybersecurity authorization and compliance for mission-critical space and enterprise systems. Lead RMF processes, ATO packages, SSPs, POA&Ms, SARs, continuous monitoring, control assessments, STIG validation, vulnerability remediation, and CMMC/NIST compliance. Translate national security requirements into system controls, support engineering reviews, coordinate with system owners and Authorizing Officials, and brief executives and government customers. The role also supports DCSA assessments, security audits, incident response, and secure system development.

Maintain and scale enterprise identity governance and access management across Active Directory, Microsoft Entra ID, cloud, SaaS, and regulated environments. Manage identity lifecycles, access reviews, Conditional Access, authentication, privileged access, SSO, federation, certificates, and non-human identities. Develop automation with PowerShell, Python, Microsoft Graph, and REST APIs while partnering with security teams to investigate identity risks and support compliance controls.