Cyber Security Product RISK Manager

Job Description

Job Description

Multiple Locations Available: Arlington, VA or Herndon, VA

Airbus U.S. Space & Defense, Inc offers advanced solutions to meet the most complex U.S. defense, security, space, and intelligence requirements. Celebrating over 50 years in the US, we remain a trusted government partner, leveraging world-class satellite, laser communication, rotor and fixed wing solutions to help our national security, defense and space focused customers meet their missions.

Airbus U.S. looks to employ a commitment driven team, dedicated to enabling our customer's mission success. We are committed to maintaining a diverse and inclusive work environment and a welcoming and engaging staff. With competitive compensation and superior employee benefits, as well as a commitment to fostering individual career growth, Airbus U.S. is the place where top talent wants to work.

Position Summary:

Airbus US is looking for a Cyber Security Product Risk Manager who works with specialists from the Cyber, Space Engineering, and Contracts departments to ensure our products meet the applicable hardening requirements with a view that cyber risks are identified and controlled during the entire product life cycle. The products include Spacecraft and associated ancillary components.

Primary Responsibilities:

• Responsible for the Cyber security of our products.
• Develop methodology to detect security events on hardware, including PCB analysis, and debug port detection.
• Extract and reverse engineer firmware, exploit development.
• Knowledge of Space BUS architecture, Secure boot
• Production of System Security Plan (SSP). These artifacts include - a System Security Plan (SSP), Risk Assessment Report, Security Controls Traceability Matrix, and Plans of Actions & Milestones (POA&Ms). Familiarity with the NIST 800-53 controls (as applied through CNSSI-1253).
• Working as an individual contributor representing the Cyber team within the Space engineering team to architect, implement, and execute Risk Management Framework (RMF) CyberSecurity, CyberResilience, Cyber Survivability requirements of satellite systems, onboard computers, and flight software.
• All candidates must be capable of supporting cybersecurity assessment events where they work closely with systems administrators and other cyber personnel and engineering personnel (ISSOs, ISSMs,) to satisfactorily demonstrate that all applicable security controls are implemented within the system boundary.
• Proactively engages with Compliance and Legal to ensure adherence with all external and internal compliance and regulatory requirements.
• Establishes strategic peer-to-peer partnerships with suppliers, manufacturers, and other industry experts in order to develop new products or improve existing products while ensuring that applicable boundaries/firewalls are respected.
• Manages multiple product and capability initiatives to drive clear prioritization and direction to cross-functional teams including Cyber Security, and Space Engineering from Airbus US as well as key client representatives.
• Provides leadership and serves as the escalation point for all issues arising across functional teams in assigned workstreams.
• Provide updates to senior leaders and other internal and external stakeholders on integration project statuses on a regular basis.
• Actively seeks and gathers customer/stakeholder feedback and applies is to product development as appropriate.
• Develop business opportunities through peer-to-peer relationships with industry influencers and government decision-makers.
• Other projects as assigned

Primary Qualifications:

Education:

• Bachelor's Degree in stem field (Cyber security, Electrical engineering, Aeronautical engineering, Aerospace Engineering) or equivalent experience (5 years Cybersecurity experience in the aerospace industry or military).

Experience:

• Familiarity with the NIST 800-53 controls (as applied through CNSSI-1253) and Development Security operations.
• Extensive experience of RMF implementation and defensive Cyber operations
• Minimum of 5 years Project Management experience that includes:
  • Leading large complex programs over multiple releases
  • A proven track record of launching new products or applications with demonstrated business impact
  • Ability to influence and coordinate multi-functional teams

Qualifications:

• Demonstrated experience of effective verbal and written communication skills across functions and multiple levels of leadership
• Demonstrated ability to manage complex initiatives and projects in a matrixed, high-speed, and quickly changing business environment.
• Outstanding communication, relationship-building influencing, and collaboration skills.
• Demonstrated strong quality/process improvement experience, with relevant examples that improved business performance and customer experience
• Advanced problem-solving skills with the ability to develop innovative solutions in a fast-changing environment.

Communication Skills (Spoken, Written, Influencing, Proficiency in Other Languages):

• Excellent communication skills, both verbal and written.
• Fluent U.S. English speaker

Technical Systems Proficiency:

• Requires advanced computer skills with a focus on Microsoft Office applications.

Travel Required :

• Up to 25% travel

Eligibility:

• US citizenship is required

Clearance:

• Ability to obtain and maintain a Government security clearance at the facility clearance level

Equal Opportunity: Airbus provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, pregnancy, marital status, veteran status, or other legally protected status. In addition to federal law requirements, Airbus complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, demotion, termination, layoff, recall, transfer, leaves of absence, compensation, benefits, and training. Airbus expressly prohibits any form of workplace harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, pregnancy, marital status, veteran status or other legally protected status.

As a matter of policy, Airbus does not sponsor visas for US positions unless specified. Only applicants with current work authorization will be considered. Airbus does not offer tenured or guaranteed employment. Employment with Airbus is at will, meaning either the company or the employee can terminate the employment relationship at any time, with or without cause, with or without notice. Airbus reserves the right to revise or change job duties and responsibilities as the need arises. This position description does not constitute a written or implied contract of employment.

By submitting your resume or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation, or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [email protected].

Job Posted by ApplicantPro