Cybersecurity Engineer, Governance & Compliance

Location: Onsite in Frederick, Maryland, USA; US citizenship required

Salary: $96K–$130K total compensation annually

Company

Rohde & Schwarz is a global technology company with approximately 14,000 employees developing technology across test and measurement, technology systems, and networks and cybersecurity.

What you will do

• Develop and improve cybersecurity governance processes, standards, procedures, templates, and technical guidance.
• Translate customer, contractual, regulatory, and internal requirements into actionable system and engineering requirements.
• Map security controls to NIST SP 800-53, NIST CSF, DISA STIGs, CIS Benchmarks, ISO 27001, and other applicable frameworks.
• Develop System Security Plans, security assessment reports, risk assessments, control summaries, risk matrices, and supporting evidence.
• Perform security assessments, threat modeling, attack-surface analysis, architecture reviews, and vulnerability management activities.
• Support design reviews, audits, Factory Acceptance Testing, Site Acceptance Testing, customer deployments, and cybersecurity activities for Air Traffic Control programs.

Requirements

• US citizenship or permanent residency with eligibility to obtain an interim or final suitability determination is required.
• Bachelor’s degree in cybersecurity, computer science, engineering, information systems, or a related technical field; a master’s degree is preferred.
• 7+ years of relevant cybersecurity, systems engineering, security compliance, or information assurance experience.
• Strong knowledge of NIST SP 800-53, cybersecurity risk management, security assessments, and compliance documentation.
• Working knowledge of network and system security architecture, including IP networking, segmentation, firewalls, ACLs, authentication, logging, encryption, and secure communications.
• Strong technical writing, analytical, organizational, communication, and cross-functional collaboration skills.

Nice to have

• Experience with Jira and Confluence.
• Experience in mission-critical, safety-critical, aviation, transportation, defense, or critical infrastructure environments.
• Certifications such as CISSP, CISM, CAP/CGRC, Security+, or GSEC.
• Experience with threat modeling, security architecture, vulnerability management, or security testing.
• Familiarity with VoIP, RF communications, Linux, Windows, and embedded systems.

Culture & Benefits

• Work as part of the U.S. cybersecurity organization and collaborate with engineering, product development, program management, customers, and global cybersecurity teams.
• Support secure mission-critical systems and innovative technology projects.
• Contribute to cybersecurity process improvement, standardization, training, knowledge transfer, automation, and reusable security artifacts.
• Total compensation includes base salary, variable pay when applicable, and benefits.
• Employment is subject to completion and favorable adjudication of the required background investigation.