Cybersecurity Engineer
OCH Technologies is seeking a Cybersecurity Engineer to support the assessment and operations teams by maintaining scanning infrastructure, building and managing sandboxing and simulation test environments, evaluating new cybersecurity tools for FAA approval, and performing specialized testing of equipment against FAA performance and cybersecurity requirements. This role is the technical backbone that keeps the assessment and pen testing teams productive. Candidate will support building the environments they test in, maintain the tools they test with, and evaluate the equipment the FAA is considering adding to its approved list.
This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements.
Location
Hybrid- William J. Hughes Technical Center (WJHTC) Egg Harbor, NJ OR Air Traffic Control System Command Center (ATCSCC) Washington, DC
This position has the potential to travel up to 25%.
Core Responsibilities & Duties
- Design, prepare, and maintain sandboxing and simulation test environments for penetration testing, red/blue team exercises, and specialized equipment evaluations.
- Maintain and administer vulnerability scanning infrastructure including Nessus, WebInspect, and related platforms.
- Perform specialized testing and evaluation of industry equipment (switches, firewalls, KVMs, TAPs, data diodes, Palo Alto appliances) against FAA and ATO cybersecurity requirements.
- Evaluate NAS edge devices being considered for deployment by NAS system owners. Gather requirements, conduct assessments, and produce written evaluation reports.
- Identify and evaluate emerging cybersecurity tools and technologies for potential adoption. Conduct risk analysis considering operational safety impact, data handling, supply chain risk, and integration complexity.
- Support pre- and post-scan activities for NAS systems. Coordinate scanning schedules with system owners.
- Develop and maintain technical documentation for test environments, tool configurations, and standard operating procedures.
- Support the NCO Technical Lead with monitoring tool deployment, log source integration, and detection rule development as needed.
- Provide technical support during on-site assessment and penetration testing events as needed.
Responsibilities may evolve over time to support team and organizational goals but will remain consistent with the overall scope of the role.