Embedded Cybersecurity Engineer II

The Embedded Cybersecurity Engineer II will help secure AeroVironment embedded systems by partnering with R&D and Operations to implement security controls, support compliance with relevant standards and contract requirements, and advance embedded cybersecurity activities across the product development lifecycle.

Location and Employment Details

• Location: Moorpark, CA (onsite)
• Salary: USD 82,000 - 125,000 per year
• Experience level: 2+ years

Responsibilities

• Collaborate with product R&D teams to align on a security mindset and guide implementation of specific security controls for product and system-wide security needs.
• Coordinate with Electrical and Hardware engineering to ensure security requirements are incorporated into hardware selection and design.
• Support the embedded system architect and developers to ensure security controls are implemented as intended.
• Support consistent application of embedded system security practices across projects.
• Coordinate with SW developers and manufacturing engineering to ensure security needs are addressed.
• Identify embedded security needs across embedded hardware, firmware, software, and microprocessors.
• Support selection of hardware components, third-party software, security tools, and vendors; identify security vulnerabilities and weaknesses within system design and architecture.
• Contribute to development of tools, processes, and policies to prevent, detect, and resolve classes of issues across the development lifecycle, including supply chain and manufacturing.
• Conduct embedded product and device cybersecurity activities, including incident response, vulnerability assessments, and mitigation implementation.
• Continuously evaluate the effectiveness of implemented cybersecurity controls.
• Implement new approaches and countermeasures for emerging threats to embedded systems.
• Provide security-related deliverables for regulatory bodies and contractual requirements.
• Assess software applications and control procedures.
• Perform other duties as assigned.

Required Qualifications

• Education: Bachelor’s degree in Cybersecurity, Electrical or Computer Engineering, Computer Science, or similar or related field (or equivalent combination of education, training, and experience).
• Experience: Two years of experience in cybersecurity and embedded hardware.
• Certifications: CompTIA Security+, GIAC Security Essentials (GSEC), or equivalent verifiable credentialed certification.
• Strong written and verbal communication skills.
• Strong analytical, time management, and organizational skills.
• Strong computer skills and proficiency with office software and productivity tools.
• Ability to work with little or no supervision and apply independent judgment regularly.
• Ability to gain cooperation and conduct presentations of technical information for specific projects or schedules.
• Additional certification options may include CISSP, CISM, CompTIA Advanced Security Practitioner (CASP) or equivalent verifiable credentialed certification.
• Additional certification options may include CEH, Offensive Security Certified Professional (OCSP), or equivalent verifiable credentialed certification.
• Experience achieving ISO 27001 certification.
• Experience complying with NIST Cybersecurity standards and guidance.
• Experience complying with the National Industrial Security Program Operating Manual (NISPOM).
• Experience in one or more technical areas:
  • Wireless and/or network communications
  • Basic knowledge of common hardware components, packaging, and PCBA-level integration
  • Basic knowledge of common cryptographic algorithms and protocols, including implementation attacks (side-channel and fault injection)
  • Hardware security implementation analysis and exploitation (cryptography, side-channel analysis, and/or fault injection)
  • Testing and validation of cybersecurity control implementation using manual methods and automated tools (e.g., ACAS, Tenable.sc, Nessus, Nexpose)

Relevant Technologies

• CompTIA Security+
• GIAC Security Essentials (GSEC)
• CISSP
• CISM
• CompTIA Advanced Security Practitioner (CASP)
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OCSP)
• ISO 27001
• NIST Cybersecurity standards and guidance
• NISPOM
• ACAS
• Tenable.sc
• Nessus
• Nexpose

Benefits

• Medical, dental, vision
• 401K with company matching
• 9/80 work schedule
• Paid holiday shutdown

Physical Demands

• Ability to sit, stand, stoop, reach, lift (up to 25 lbs.), bend, and similar physical movements.
• Hand and wrist dexterity to use a computer.
• May require travel to sites/program and special functions.

Environmental Conditions

• Office environment with climate control via central air conditioning and heating.
• Occasional work on the production floor may be required.
• May have some exposure to outside environment while traveling.

Special Requirements and Clearance

• U.S. Citizen
• Must be able to travel within the Continental U.S. and internationally when required.
• Must have a DoD Secret security clearance or be eligible to obtain one.
• Clearance level: Secret

ITAR and Export Compliance

• This role requires access to information subject to compliance with the International Traffic Arms Regulations (ITAR) and/or the Export Administration Regulations (EAR).
• Applicants must qualify as a U.S. person under ITAR and EAR, or be approved for an export license by the governing agency whose technology comes under its jurisdiction.
• A “U.S. person” includes U.S. citizens, U.S. lawful permanent residents (green card holders), or protected individuals such as refugees or asylees (per 22 CFR § 120.15).
• Some positions may require current U.S. citizenship due to contract requirements.
• ITAR: U.S. Citizenship required; must be willing to work on government contracts and have the ability to obtain a security clearance.