Apply on Employer Site

Noblis · 3 months ago

FAA Security Engineer

Atlantic City, NJ

Full-time

Onsite

Senior Level

$96K/yr - $149K/yr

6+ years exp

Noblis is a company that tackles the nation's toughest problems and applies advanced solutions to critical missions for government clients. They are seeking a FAA Security Engineer to provide hands-on cybersecurity support, analyze security risks, and collaborate with stakeholders to achieve security authorization for FAA ATC VCS systems and tools.

Information TechnologyNational SecurityNon Profit

Growth Opportunities

Responsibilities

Provide hands-on cybersecurity support to the FAA Security Lead and Technical Team

Help FAA achieve security and technical milestones for the procurement, verification, validation, test and deployment of modern IP-VCSs and Air-to-Ground Protocol Converters (APCs)

Provide technical expertise on system implementations used to address security controls

Analyze, investigate and track security risks and/or issues on FAA and vendor systems, using common standards, certifications and methods

Utilize system hardening knowledge and Linux skills to generate security artifacts

Collaborate with stakeholders from other functional and technical organizations to achieve security authorization for FAA ATC VCS systems and tools

Qualification

Linux System AdministrationSystem SecurityNetworkingAutomation ToolsNetwork Protocol AnalyzersSecurity Standards KnowledgeLogic/Reasoning SkillsVerbal CommunicationWritten CommunicationTeam Collaboration

Required

Bachelor of Science in Computer Science, Information System Security, Cybersecurity or similar discipline

6-15 years of relevant hands-on experience

Robust, hands-on experience on the Linux terminal, writing bash scripts, configuring packages and servers

Extensive understanding of Linux operating system structure and configuration (e.g. directory structure, device files, network configuration)

Strong experience developing, configuring and using automation tools such as Ansible, Docker, Jenkins, etc

Working understanding of the OSI Model, including hands-on skills and knowledge of system networking, network design, VLAN/subnetting, configuring and managing routers & switches

Knowledge of network protocol interactions

Experience using and understanding network protocol analyzers, such as Wireshark

Understanding of IPv5 addressing, subnetting (IPv6 knowledge a plus)

Experience with firewall configuration

Experience with system, port scanning & vulnerability scanning, including hands-on analysis of findings, validation findings are accurate/applicable and remediation of all findings

Working knowledge of security standards, including NIST 800-53, HSPD-23, and ISO 27001

Experience performing system penetration testing to verify security controls are effective

Familiarity with cryptographic protocols (asymmetric/symmetric ciphers, hashing, key exchange)

Experience documenting security requirements for Statements of Work (SOWs), Contract Data Requirements Lists (CDRLs), and Data Item Descriptions (DIDs)