Senior Cyber Engineer

Worker Type

Job Description

 

Summary

AV delivers battlefield-proven systems and next-generation capabilities across all domains of modern defense. The Senior Cyber Engineer ensures those systems, and the environments they operate in, are secure, resilient, and supportable across their full lifecycle.

This role is focused on securing the application and infrastructure layers of AV systems. It works directly with engineering and infrastructure teams to ensure cybersecurity is implemented in a way that supports how AV designs, builds, deploys, and sustains products across multiple sites and programs.

Rather than functioning as a compliance or monitoring role, this position is hands-on, ensuring systems are secure in practice, not just compliant on paper and that cybersecurity is consistently applied across development, deployment, and sustainment. You will be the enterprise authority for cybersecurity at the application and infrastructure layers, governing how AV designs, implements, and sustains secure digital platforms across sites and programs.

Preferred Location(s)

Huntsville, AL; Dayton, OH; Melbourne, FL; Albuquerque, NM (flexible)

Role Overview

The Senior Cyber Engineer operates at the intersection of software, infrastructure, and system engineering, supporting secure design and implementation across AV’s product and enterprise environments.

This includes working with engineering teams to identify and correct vulnerabilities early in the design process, guiding secure implementation of software and infrastructure, and ensuring systems are properly hardened, monitored, and supportable in real-world operational environments.

The role applies fit-for-purpose cybersecurity approaches, recognizing that different systems—whether disposable or serviceable, sensitive or non-sensitive—require different levels of protection, persistence, and data handling.

This is a hands-on engineering role where the individual is expected to actively participate in implementation, remediation, and system-level problem solving—not solely provide guidance.

Position Responsibilities

• Support cyber secure design and implementation across application and infrastructure layers, including software architectures, APIs, data handling, operating systems, networks, cloud, and container environments.
• Participate in architecture and design reviews (SRR/PDR/CDR) to identify vulnerabilities and implementation risks early, providing practical, implementable solutions that enable progress rather than delay it.
• Lead and support system hardening efforts using established standards (e.g., STIGs, CIS benchmarks) and define repeatable approaches to vulnerability scanning and remediation using tools such as ACAS and Nessus.
• Lead or directly support remediation of cybersecurity vulnerabilities, including patching systems, validating fixes, and ensuring issues are resolved without introducing new operational risk.
• Ensure systems are properly instrumented for logging, monitoring, and auditability, and that security-relevant data is available and usable across development, test, and operational environments. Support integration with SIEM platforms such as Splunk or Elastic.
• Support RMF/NIST-based accreditation efforts by translating control requirements into concrete design and implementation guidance, ensuring systems meet required controls without introducing unnecessary process friction.
• Serve as a practical integration point between engineering, IT infrastructure, and cybersecurity functions, helping align system designs with enterprise security expectations while maintaining program execution.
• Investigate cybersecurity issues across development, integration, and fielded systems, working with teams to implement corrective actions and improve system resilience over time.
• Support integration of cybersecurity practices into broader system and data environments, including alignment with PLM/ERP systems (e.g., Arena, Oracle Fusion) where applicable, and ensuring configurations and baselines are traceable and controlled.
• Act as a cross-functional advisor, influencing engineering and program teams through risk-based reasoning and practical tradeoffs between mission, performance, cost, and security.

Enterprise Cybersecurity Governance

• Define and maintain security baselines and patterns for software, infrastructure, and data flows.
• Establish and improve cybersecurity processes integrated into engineering workflows, design reviews, and configuration & release.

Basic Qualifications (Required Skills & Experience)