2027 Graduate – Cybersecurity Engineer - Critical Infrastructure Protection

Johns Hopkins Applied Physics Laboratory•Laurel, MD

20h

About The Position

The Critical Infrastructure Protection Group at the Johns Hopkins University Applied Physics Laboratory (APL) is hiring a graduate Cybersecurity Engineer to develop, evaluate, and transition technologies that improve the security and resilience of critical infrastructure and cyber-physical systems. The role involves working with mission stakeholders on challenges in operational technology (OT), industrial control systems (ICS), cyber situational awareness, resilient architectures, system assurance, machine learning, AI-enabled cyber defense and decision support, digital twins, and related fields. Work may also include software and hardware reverse engineering, vulnerability research, and proof-of-concept offensive cyber capabilities focused on critical infrastructure systems. Engineers contribute across the technology lifecycle: understanding mission needs, conducting research, building prototypes, evaluating them on representative systems, and transitioning successful capabilities into operationally relevant environments. Laboratory facilities, including the CYPRESS Laboratory, provide realistic testbeds for evaluating technologies against field constraints and threats. The position requires collaboration with sponsors, operators, and multidisciplinary teams, as well as communicating technical results through documentation, briefings, demonstrations, and, when appropriate, publications and technical forums. APL describes its culture as welcoming and supportive of creativity, growth, and collaboration. Its campus is in the Baltimore-Washington metro area. Applications are accepted on a rolling basis. The posted annual pay range is $85,000 to $165,000; actual compensation may vary based on location, experience, market conditions, education, training, skills, and internal parity.

Requirements

Bachelor's or master's degree in cybersecurity, computer science, engineering, or a related technical field, or equivalent practical experience.
Experience with Python or another programming language such as C/C++, Java, Go, or Rust, and familiarity with Linux environments, debugging, and version control.
Foundational knowledge of cybersecurity principles, including network security, vulnerability analysis, and offensive cyber concepts.
Understanding of basic networking concepts and exposure to areas such as embedded systems, virtualization, industrial control systems, or related technologies.
Experience solving technical problems through coursework, internships, research, or hands-on projects, including testing, troubleshooting, and evaluating solutions.
Experience using AI-assisted tools for coding, debugging, research, or other technical tasks, with an understanding of how to validate results and use the tools responsibly.
Strong communication, analytical, and teamwork skills, with an interest in collaborating across technical disciplines.
Ability to obtain an Interim Secret security clearance by the start date and ultimately obtain a Top Secret clearance; U.S. citizenship and meeting government requirements for access to classified information are required.

Nice To Haves

Hands-on cybersecurity, embedded systems, industrial control systems, operational technology, or cyber-physical systems experience through coursework, internships, research, or personal projects.
Exposure to reverse engineering, vulnerability research, penetration testing, network protocol analysis, or cyber test and evaluation.
Experience with cybersecurity or development tools such as Wireshark, Ghidra, Docker, SIEM platforms, or similar technologies.
Familiarity with AI/ML, data analysis, modeling and simulation, or emerging technologies and their applications to cybersecurity.
Participation in technical research, independent projects, cybersecurity competitions, or collaborative engineering projects.
An active TS/SCI or higher-level U.S. Government security clearance.

Responsibilities

Research, develop, and prototype technologies that improve the security, resilience, and assurance of critical infrastructure and cyber-physical systems, including autonomous cyber defense technologies.
Work with sponsors, operators, and mission stakeholders to understand operational challenges, define technical requirements and success criteria, and translate mission needs into technical solutions.
Build and evaluate cybersecurity capabilities spanning software, networks, embedded devices, industrial control systems, and representative cyber-physical environments.
Analyze and reverse engineer control-system protocols, software, hardware, and system architectures to identify vulnerabilities and opportunities for cyber hardening and improved resilience.
Conduct cyber test and evaluation, adversary emulation, vulnerability research, protocol analysis, and experimental assessments in laboratory and representative operational environments.
Develop and evaluate cyber situational awareness, decision support, resilient architecture, and AI-enabled capabilities; use AI/ML for analysis and decision support where appropriate and characterize performance, uncertainty, limitations, and failure modes under realistic operating conditions.
Evaluate commercial and emerging technologies, identify gaps affecting government and mission use cases, and adapt or extend technologies to meet operational needs.
Transition successful prototypes from laboratory demonstrations into operationally relevant environments and, when appropriate, fielded capabilities.
Communicate technical approaches and results through documentation, briefings, demonstrations, and, when appropriate, publications and technical forums.