Cybersecurity Engineer – Aviation Data Transfer and Emerging Capabilities

Torch Technologies, Inc.•Huntsville, AL

22h•Onsite

About The Position

Torch Technologies is seeking a skilled Cybersecurity Engineer to support the protection of an aviation data transfer ecosystem by ensuring modern software and integration capabilities are developed, deployed, and sustained with strong cybersecurity rigor. As a Cybersecurity Engineer your duties will include the following, but are not limited to: Define and implement cybersecurity requirements for aviation data transfer applications, services, middleware, and supporting infrastructure. Assess software designs and interfaces for confidentiality, integrity, availability, and resilience concerns across data exchange workflows. Support secure implementation of transfer protocols, API protections, identity and access controls, encryption, secrets handling, and logging. Perform security reviews of application code, architecture, configurations, and deployment patterns. Assist with vulnerability identification, remediation planning, POA&M support, and verification of corrective actions. Support RMF, SSP, STIG, security control implementation, and authorization-related evidence as required by the program. Work with software teams to integrate secure coding practices, dependency hygiene, scanning, and security gates into CI/CD workflows. Evaluate cyber risk for legacy and emerging capabilities and recommend pragmatic mitigations aligned to mission needs. Support incident response readiness, auditability, and secure operational monitoring for critical data transfer services. Contribute to technical documentation including security architecture views, procedures, control mappings, and compliance artifacts.

Requirements

U.S. Citizenship
Bachelor’s degree in Computer Science or related field. Advanced degree is preferred.
4+ years of experience.
Active secret clearance and ability to maintain clearance is required to start.
Experience securing software-intensive systems, web applications, APIs, services, or distributed architectures.
Knowledge of cybersecurity principles including authentication, authorization, encryption, secure communications, and least-privilege design.
Experience with vulnerability assessment, secure configuration review, and remediation tracking.
Familiarity with security frameworks and processes used in government or regulated environments, such as RMF, STIGs, or related control baselines.
Understanding of networking, system integration, and data transfer mechanisms in modern software environments.
Ability to work closely with developers, system engineers, and operations personnel to balance risk reduction with mission execution.
Strong communication skills and the ability to produce clear technical and compliance documentation.
Strong understanding of emerging technologies and their cybersecurity implications (e.g., zero-trust architectures).
Relevant industry certifications such as CISSP, CEH, Security+, or equivalent.
Excellent problem-solving, analytical, and communication skills.
Ability to work independently and as part of a collaborative team in a fast-paced environment.

Nice To Haves

Experience supporting aviation, aerospace, defense, or mission systems.
Experience with DevSecOps tooling, automated code scanning, container security, and dependency management.
Knowledge of cloud or hybrid hosting environments such as Azure, AWS, or government cloud environments.
Experience with secure transfer protocols, PKI, certificate management, or cross-domain data movement considerations.

Responsibilities

Define and implement cybersecurity requirements for aviation data transfer applications, services, middleware, and supporting infrastructure.
Assess software designs and interfaces for confidentiality, integrity, availability, and resilience concerns across data exchange workflows.
Support secure implementation of transfer protocols, API protections, identity and access controls, encryption, secrets handling, and logging.
Perform security reviews of application code, architecture, configurations, and deployment patterns.
Assist with vulnerability identification, remediation planning, POA&M support, and verification of corrective actions.
Support RMF, SSP, STIG, security control implementation, and authorization-related evidence as required by the program.
Work with software teams to integrate secure coding practices, dependency hygiene, scanning, and security gates into CI/CD workflows.
Evaluate cyber risk for legacy and emerging capabilities and recommend pragmatic mitigations aligned to mission needs.
Support incident response readiness, auditability, and secure operational monitoring for critical data transfer services.
Contribute to technical documentation including security architecture views, procedures, control mappings, and compliance artifacts.