QuesTek Europe AB

Security Engineer

• Serve as primary technical POC for all security assessments, vulnerability assessments, and analyses of alternatives under the contract
• Lead assessment planning and coordination at FAA facilities nationwide, including developing System Security Assessment Test Plans and managing pre- and post-assessment activities
• Personally lead complex or high-visibility assessment events
• Ensure all assessments use the three NIST 800-53A methods (Examine, Interview, Test) and produce compliant SARs
• Develop and maintain vulnerability scanning strategies including Tactics, Techniques, and Procedures (TTPs)
• Evaluate and recommend scanning tools and configurations for NAS and Mission Support environments
• Conduct risk translation from assessment findings and develop draft Plans of Action and Milestones (POAMs) with actionable remediation guidance
• Lead regression assessment activities to validate that patches, fixes, and configuration changes mitigate previously identified vulnerabilities
• Attend all Program Management Reviews and report on assessment status, deliverable timelines, and technical issues
• Mentor and develop junior assessment staff
• Build a team culture where analysts take ownership of their assigned systems and drive assessments to completion independently
• Coordinate with NAS system owners, FAA facility staff, AIT/AIS, and ACG to schedule assessments and resolve access and logistical issues
• Ensure assessment work in NAS operational environments follows safety protocols.

Security Assessment Lead

Program Manager

• Serve as OCH's primary point of contact for the FAA CO, COR, and program office on all contractual and administrative matters.
• Develop and maintain the Program Management Plan (PMP), Integrated Master Test Schedule, and all program-level CDRLs.
• Lead quarterly Program Management Reviews (PMRs) and prepare associated presentation materials, agendas, and minutes.
• Manage contract budget, labor utilization, and CLIN burn rates.
• Provide early warning on funding, staffing, or schedule risks.
• Coordinate staffing actions including recruiting, onboarding, security processing, and backfill planning.
• Maintain qualified bench depth to prevent gaps.
• Manage subcontractor performance, deliverable quality, and compliance with flow-down requirements.
• Own the Monthly Status Report (MSR) and Monthly Financial Report (MFR) and ensure all deliverables are submitted on time and meet quality standards before COR review.
• Oversee phase-in and phase-out transition activities including inventory, badging, knowledge transfer, and documentation turnover.
• Ensure compliance with all applicable FAA orders, AMS clauses, and contract-specific requirements including personnel suitability, records management, and confidentiality.
• Identify and escalate risks to the OCH executive team.
• Recommend and implement corrective actions when performance trends deviate from plan.
• Responsibilities may evolve over time to support team and organizational goals but will remain consistent with the overall scope of the role.

• Serve as primary technical POC for all penetration testing activities, including network, system, application, aircraft cyber, and specialized assessments.
• Develop Rules of Engagement (ROE) with system owners and ACG for each penetration test.
• Ensure all parties understand scope, constraints, and reporting requirements before testing begins.
• Personally lead high-complexity penetration tests in NAS and Mission Support environments.
• Direct testing teams during execution.
• Plan and execute red team and blue team exercises in simulated environments as directed by the FAA.
• Design realistic attack scenarios that test the effectiveness of NAS cybersecurity defenses.
• Document all penetration test results in Penetration Test Reports (PTRs) including attack vectors tested, vulnerabilities discovered, exploitation paths, and recommended remediation actions.
• Assess and document impact when access is gained during testing, including potential cascading effects on associated systems and network infrastructure.
• Report high-risk findings immediately to the FAA.
• Lead regression penetration testing to validate that previously identified vulnerabilities have been effectively remediated.
• Manage and maintain penetration testing tools and environments. All tools must be FAA-approved.
• Attend all Program Management Reviews and report on penetration testing status, findings trends, and upcoming test schedules.

Penetration Testing Lead

Security Operations

• Provide day-to-day technical oversight, coordination, and guidance to contractor personnel performing operational cybersecurity and threat intelligence functions.
• Lead all activities supporting the National Cybersecurity Operations (NCO) mission including threat intelligence collection and analysis, threat hunting, and incident response coordination.
• Monitor and analyze cyber threat intelligence relevant to FAA and NAS systems.
• Produce actionable intelligence products that inform assessment priorities and defensive posture decisions.
• Coordinate incident response activities when potential security events are identified.
• Ensure response actions follow established procedures and are documented.
• Attend all Program Management Reviews with the Program Manager and report on NCO operational support activities, threat intelligence findings, deliverables, and technical issues.
• Maintain awareness of emerging cyber threats targeting critical infrastructure, aviation systems, and government networks.
• Brief FAA leadership on threat trends and recommended defensive actions.
• Collaborate with the Security Assessment Lead and Penetration Testing Lead to ensure assessment and testing priorities reflect the current threat landscape.
• Develop and maintain standard operating procedures for NCO functions including escalation criteria, reporting templates, and coordination protocols.
• Manage and oversee contractor staff performing NCO functions.
• Ensure personnel maintain required qualifications and training.

NCO Technical Lead

Network Engineer

• Design, implement, and maintain highly available, secure, and scalable network architectures.
• Oversee operations and performance of environments, ensuring uptime, redundancy, and resilience.
• Implement network modernization, optimization, and continuous improvement initiatives.
• Manage and support core networking technologies including routing, switching, load balancing, and network security.
• Provide Tier 2 troubleshooting and root cause analysis for complex network issues.
• Oversee and optimize performance using monitoring and diagnostic tools.
• Collaborate with infrastructure, security, and application teams to ensure seamless system integration.
• Create and maintain network documentation, standards, and SOPs.
• Support federal compliance standards and frameworks (e.g., NIST, FAA guidelines where applicable).
• Participate in strategic planning, capacity planning, and technology road mapping.
• Participate in on-call rotation for critical issues.
• Support configuration management and IT logistics activities.
• Assist with systems testing and maintenance.
• Occasional travel to government facilities is required.
• Monitor and analyze network logs, alerts, and telemetry to proactively identify and address potential failures before they impact operations.
• Perform security maintenance tasks on network infrastructure including vulnerability remediation, compliance patching, and verification of security hardening standards.

Security Assessment Lead

Program Manager

Penetration Testing Lead

NCO Technical Lead

Senior Network Engineer