Systems Engineer (Security)

The Systems & Security Engineer performs system-level engineering work, in particular for requirements definition and verification, system and sub-system design and analysis, use case definition, and interface design. The tasks cover all technical activities related to the SATCOM and In-Flight Connectivity (IFC) products of the company.

So, deep technical knowledge and a willingness to learn is required, since the person is normally the natural reference, internally and towards external partners (customers and suppliers), for many technical questions. The preparation, maintenance, and control of the company’s technical documentation is also part of the person’s responsibilities.

Responsibilities

• Translate customer needs into system, sub-system, and equipment requirements; create and maintain corresponding Use Cases and requirement documents
• Perform high-level system and sub-system design, including design and verification of sub-system interfaces
• Analyze and verify that designs meet requirements
• Participate in creation and presentation of design reviews, internally and with customers
• Manage technical projects and work packages, including in R&D projects as required
• Mentor junior colleagues on company products and systems-engineering practices
• Scout the market for relevant emerging technologies and initiate investigation for potential adoption into company products
• Support aircraft and inflight-connectivity system security, including: Designing and integrating embedded cybersecurity features across wired and wireless systems, on and off the aircraft, with security built in from initial design through deployment and ongoing maintenance
• Writing security deliverables and managing OEM-mandated product security documentation to support certification and regulatory (airworthiness) compliance
• Defining and applying security assurance processes
• Performing threat modeling, vulnerability assessments/tracking, security risk assessments, and penetration testing on software, hardware, and networked aircraft systems
• Assisting in system security architecture definition
• Leading or supporting incident response (including CSIRT activities), monitoring for intrusions and emerging threats, investigating incidents, and optimizing security tooling
• Preparing, planning, and documenting security test cases and scenarios
• Responding to customer security-related requests
• Collaborating with hardware, software (Android/Linux), and systems engineering teams, translating OEM and industry cybersecurity requirements into actionable engineering tasks
• Continuously contribute to process improvement
• Perform other job-related duties as assigned

Requirements

• Bachelor’s Degree in Engineering or equivalent experience in a related field
• 6+ years of experience working as Systems Engineer
• Working knowledge of at least one of the following security standards/guidelines
• (e.g. DO-326A/ED-202A series, ISO 27000, ARINC 811)
• Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems
• Knowledge of penetration testing tools (e.g. Kali Linux, nmap, Burp Suite, vulnerability scanners
• (Nessus, OpenVAS)) is advantageous
• Cybersecurity Requirements (DO-326A / DO-355)
• Threat and risk assessment (TARA) for all external interfaces
• Penetration testing per aircraft-level security plan
• Intrusion detection on aircraft-side gateways
• Certificate lifecycle management for ground-to-air TLS sessions
• Logging and auditability of all software load events (your syslog is an example of this in practice)