J

Johns Hopkins Applied Physics Laboratory

Not-for-profit UARC delivering national security research

Cybersecurity Engineer - Critical Infrastructure Protection

Security Engineering & Architecture +1Confirmed live in the last 24 hours
Full-timeLaurel, MD, USAIn-person

About the Job

Requirements

  • Have a PhD, or be soon to have one, in cybersecurity, computer science, engineering, or another relevant technical field, or equivalent practical experience.
  • Have knowledge of Python or another programming language such as C/C++, Java, Go, or Rust; experience with shell scripting and version control; and comfort developing, debugging, and automating technical workflows in Linux environments.
  • Be proficient in Python or another programming language such as C/C++, Java, Go, or Rust; have experience with shell scripting and version control; and be comfortable developing, debugging, and automating technical workflows in Linux environments.
  • Have knowledge of offensive cyber capability development.
  • Have a working knowledge of IP networking and familiarity with one or more areas such as virtualization, software-defined networking, embedded systems, industrial control systems, or industrial communication protocols.
  • Understand cybersecurity principles such as system and network security, threat modeling, vulnerability analysis, defense-in-depth, and security architecture, and be able to apply them to software, hardware, networks, or cyber-physical systems.
  • Be comfortable working on open-ended technical problems and moving from problem formulation and experimentation to implementation, integration, testing, and evaluation.
  • Be able to formulate and investigate technical questions experimentally and use evidence from testing to refine designs and technical approaches rather than only implementing predefined requirements.
  • Have hands-on experience using generative AI or AI-assisted development tools for technical tasks such as coding, debugging, testing, analysis, or documentation; verify AI-generated results through testing, checking assumptions and calculations, and comparing outputs against source data or authoritative references; and use AI tools in accordance with applicable information-handling requirements.
  • Have strong written and verbal communication skills and be able to work effectively on cross-functional, interdisciplinary teams.
  • Have experience with debugging interfaces, diagnostic tools, and protocol analysis, and understand the strengths and weaknesses of security mechanisms.
  • Be able to obtain an Interim Secret level security clearance by the start date and ultimately obtain a Top Secret level clearance; eligibility requirements include U.S. citizenship.

Responsibilities

  • Research, develop, and prototype technologies that improve the security, resilience, and assurance of critical infrastructure and cyber-physical systems, including technologies for autonomous cyber defense.
  • Work directly with sponsors, operators, and other mission stakeholders to understand operational challenges, define technical requirements and success criteria, and translate mission needs into technical solutions.
  • Build and evaluate cybersecurity capabilities spanning software, networks, embedded devices, industrial control systems, and representative cyber-physical environments.
  • Analyze and reverse engineer control system protocols, software, hardware, and system architectures to identify vulnerabilities and opportunities for cyber hardening and improved resilience.
  • Conduct cyber test and evaluation, adversary emulation, vulnerability research, protocol analysis, and experimental assessments using laboratory and representative operational environments.
  • Develop and evaluate cyber situational awareness, decision support, resilient architecture, and AI-enabled capabilities, including the use of AI/ML for analysis and decision support where appropriate, and characterize their performance, uncertainty, limitations, and failure modes under realistic operating conditions.
  • Evaluate commercial and emerging technologies, identify gaps affecting government and mission use cases, and adapt or extend technologies to address operational needs.
  • Transition successful prototypes from laboratory demonstrations into operationally relevant environments and, when appropriate, fielded capabilities.
  • Communicate technical approaches and results through documentation, briefings, demonstrations, and, when appropriate, publications and technical forums.

Desired Qualifications

  • Have hands-on cybersecurity experience with operational technology, industrial control systems, embedded systems, or other cyber-physical systems.
  • Have experience with programmable logic controllers (PLCs), industrial automation platforms, or associated engineering environments.
  • Have experience with cyber test and evaluation, software or hardware reverse engineering, vulnerability research, adversary emulation, or network protocol analysis.
  • Have experience developing, integrating, securing, or evaluating AI/ML capabilities, particularly for cybersecurity applications involving time-series or sensor data, anomaly detection, autonomous systems, cyber situational awareness, or decision support.
  • Have experience evaluating AI/ML systems for robustness, security, uncertainty, failure modes, or performance under adversarial, degraded, or out-of-distribution conditions.
  • Have experience designing experiments, defining quantitative evaluation criteria, analyzing results, and drawing defensible conclusions from complex system testing.
  • Have experience with cyber engineering, analysis, and development tools such as Wireshark, Ghidra, Docker, security information and event management (SIEM) tools, or comparable technologies.
  • Have familiarity with modeling and simulation, data science, cryptography, formal methods, system assurance, resilient architectures, or digital twin technologies.
  • Have research experience, publications, technical leadership experience, or experience transitioning prototypes into operational use.
  • Hold an active TS/SCI or higher-level U.S. Government security clearance.

About the Company

Johns Hopkins Applied Physics Laboratory

Not-for-profit UARC delivering national security research

Johns Hopkins Applied Physics Laboratory (APL) is a not-for-profit university-affiliated research center that provides solutions to complex national security and scientific challenges through technical expertise, prototyping, research and development, and analysis. It uses engineering, simulations, and studies to design prototypes and deliver analyses that support government and partner organizations. Unlike many commercial firms, APL operates as a non-profit affiliated with Johns Hopkins and focuses on mission-oriented research rather than selling finished products. Its goal is to provide practical, thoroughly tested solutions to public-sector customers by performing research, developing prototypes, and offering expert analysis.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
United States
Founded
1942

Recently Posted Jobs

Explore more opportunities at Johns Hopkins Applied Physics Laboratory

See more jobs