QuesTek Europe AB

Full-stack Engineer

• Design, develop, test, deploy, and maintain secure, scalable full-stack applications supporting the FAA Enterprise Information Display System (E-IDS).
• Develop, enhance, and maintain back-end services using Java, Spring Boot, REST APIs, and microservices architecture.
• Build and maintain responsive front-end user interfaces using Angular or comparable modern web technologies.
• Collaborate with software architects, platform engineers, system integration, test, product owners, and other cross-functional development teams to deliver integrated software solutions.
• Participate in Agile ceremonies, including sprint planning, backlog refinement, daily stand-ups, reviews, and retrospectives.
• Develop, troubleshoot, and optimize application across development, integration, test, and production-like environments.
• Participate in peer code reviews and contribute to software quality, maintainability, and secure coding practices.
• Support CI/CD pipelines, containerized deployments, and DevSecOps practices.
• Create and maintain technical documentation, including design artifacts, implementation notes, and operational documentation.
• Analyze and resolve software defects, performance issues, and integration challenges while supporting continuous improvement initiatives.

Mid-Level Full Stack Developer

Security Engineer

• Support the assessment and operations teams by maintaining scanning infrastructure, building and managing sandboxing and simulation test environments.
• Evaluate new cybersecurity tools for FAA approval, and performing specialized testing of equipment against FAA performance and cybersecurity requirements.
• Design, prepare, and maintain sandboxing and simulation test environments for penetration testing, red/blue team exercises, and specialized equipment evaluations.
• Maintain and administer vulnerability scanning infrastructure including Nessus, WebInspect, and related platforms.
• Perform specialized testing and evaluation of industry equipment (switches, firewalls, KVMs, TAPs, data diodes, Palo Alto appliances) against FAA and ATO cybersecurity requirements.
• Evaluate NAS edge devices being considered for deployment by NAS system owners.
• Gather requirements, conduct assessments, and produce written evaluation reports.
• Conduct risk analysis considering operational safety impact, data handling, supply chain risk, and integration complexity.
• Support pre- and post-scan activities for NAS systems.
• Coordinate scanning schedules with system owners.
• Develop and maintain technical documentation for test environments, tool configurations, and standard operating procedures.
• Support the NCO Technical Lead with monitoring tool deployment, log source integration, and detection rule development as needed.

Cybersecurity Engineer

QA Engineer

• Execute penetration tests against NAS and Mission Support systems, networks, and applications following approved Rules of Engagement and test plans.
• Identify and exploit vulnerabilities in network infrastructure, operating systems, web applications, and databases.
• Participate in red team and blue team exercises in simulated environments.
• Execute attack scenarios and document findings.
• Document all testing activities, findings, and exploitation paths in Penetration Test Reports (PTRs).
• Perform regression penetration tests to validate remediation of previously identified vulnerabilities.
• Support aircraft cyber testing activities including avionics and flight system security assessments when directed.
• Support specialized assessments of edge devices, firewalls, load balancers, and other network infrastructure components.
• Assess and document the potential for lateral movement when access is gained during testing.
• Report high-risk findings immediately.
• Maintain and update penetration testing tools and lab environments. All tools must be FAA-approved prior to use.
• Support the Penetration Testing Lead in developing Rules of Engagement and test plans for upcoming engagements.

Penetration Tester

• Serve as primary technical POC for all security assessments, vulnerability assessments, and analyses of alternatives under the contract
• Lead assessment planning and coordination at FAA facilities nationwide, including developing System Security Assessment Test Plans and managing pre- and post-assessment activities
• Personally lead complex or high-visibility assessment events
• Ensure all assessments use the three NIST 800-53A methods (Examine, Interview, Test) and produce compliant SARs
• Develop and maintain vulnerability scanning strategies including Tactics, Techniques, and Procedures (TTPs)
• Evaluate and recommend scanning tools and configurations for NAS and Mission Support environments
• Conduct risk translation from assessment findings and develop draft Plans of Action and Milestones (POAMs) with actionable remediation guidance
• Lead regression assessment activities to validate that patches, fixes, and configuration changes mitigate previously identified vulnerabilities
• Attend all Program Management Reviews and report on assessment status, deliverable timelines, and technical issues
• Mentor and develop junior assessment staff
• Build a team culture where analysts take ownership of their assigned systems and drive assessments to completion independently
• Coordinate with NAS system owners, FAA facility staff, AIT/AIS, and ACG to schedule assessments and resolve access and logistical issues
• Ensure assessment work in NAS operational environments follows safety protocols.

Security Assessment Lead

Program Manager

• Serve as OCH's primary point of contact for the FAA CO, COR, and program office on all contractual and administrative matters.
• Develop and maintain the Program Management Plan (PMP), Integrated Master Test Schedule, and all program-level CDRLs.
• Lead quarterly Program Management Reviews (PMRs) and prepare associated presentation materials, agendas, and minutes.
• Manage contract budget, labor utilization, and CLIN burn rates.
• Provide early warning on funding, staffing, or schedule risks.
• Coordinate staffing actions including recruiting, onboarding, security processing, and backfill planning.
• Maintain qualified bench depth to prevent gaps.
• Manage subcontractor performance, deliverable quality, and compliance with flow-down requirements.
• Own the Monthly Status Report (MSR) and Monthly Financial Report (MFR) and ensure all deliverables are submitted on time and meet quality standards before COR review.
• Oversee phase-in and phase-out transition activities including inventory, badging, knowledge transfer, and documentation turnover.
• Ensure compliance with all applicable FAA orders, AMS clauses, and contract-specific requirements including personnel suitability, records management, and confidentiality.
• Identify and escalate risks to the OCH executive team.
• Recommend and implement corrective actions when performance trends deviate from plan.
• Responsibilities may evolve over time to support team and organizational goals but will remain consistent with the overall scope of the role.

• Serve as primary technical POC for all penetration testing activities, including network, system, application, aircraft cyber, and specialized assessments.
• Develop Rules of Engagement (ROE) with system owners and ACG for each penetration test.
• Ensure all parties understand scope, constraints, and reporting requirements before testing begins.
• Personally lead high-complexity penetration tests in NAS and Mission Support environments.
• Direct testing teams during execution.
• Plan and execute red team and blue team exercises in simulated environments as directed by the FAA.
• Design realistic attack scenarios that test the effectiveness of NAS cybersecurity defenses.
• Document all penetration test results in Penetration Test Reports (PTRs) including attack vectors tested, vulnerabilities discovered, exploitation paths, and recommended remediation actions.
• Assess and document impact when access is gained during testing, including potential cascading effects on associated systems and network infrastructure.
• Report high-risk findings immediately to the FAA.
• Lead regression penetration testing to validate that previously identified vulnerabilities have been effectively remediated.
• Manage and maintain penetration testing tools and environments. All tools must be FAA-approved.
• Attend all Program Management Reviews and report on penetration testing status, findings trends, and upcoming test schedules.

Penetration Testing Lead

Security Operations

• Provide day-to-day technical oversight, coordination, and guidance to contractor personnel performing operational cybersecurity and threat intelligence functions.
• Lead all activities supporting the National Cybersecurity Operations (NCO) mission including threat intelligence collection and analysis, threat hunting, and incident response coordination.
• Monitor and analyze cyber threat intelligence relevant to FAA and NAS systems.
• Produce actionable intelligence products that inform assessment priorities and defensive posture decisions.
• Coordinate incident response activities when potential security events are identified.
• Ensure response actions follow established procedures and are documented.
• Attend all Program Management Reviews with the Program Manager and report on NCO operational support activities, threat intelligence findings, deliverables, and technical issues.
• Maintain awareness of emerging cyber threats targeting critical infrastructure, aviation systems, and government networks.
• Brief FAA leadership on threat trends and recommended defensive actions.
• Collaborate with the Security Assessment Lead and Penetration Testing Lead to ensure assessment and testing priorities reflect the current threat landscape.
• Develop and maintain standard operating procedures for NCO functions including escalation criteria, reporting templates, and coordination protocols.
• Manage and oversee contractor staff performing NCO functions.
• Ensure personnel maintain required qualifications and training.