The Metropolitan Washington Airports Authority doesn't run a software platform - it runs the attack surface. MWAA operates Ronald Reagan Washington National Airport and Washington Dulles International Airport, two of the highest-profile pieces of critical infrastructure on the Eastern Seaboard, plus the Dulles Toll Road. Millions of travelers pass through these facilities annually, and the digital systems behind that throughput - access control, baggage handling, flight operations, passenger processing, payment infrastructure - are exactly what a cybersecurity team here has to defend.
The threat model is real and layered: nation-state actors interested in the Mid-Atlantic corridor, ransomware targeting operational technology that can't afford downtime, and the constant churn of third-party integrations across aviation and transportation systems. This is a public body created by interstate compact, operating across Virginia and the District of Columbia, which means compliance regimes are non-negotiable and the regulatory surface area is significant. Security work here involves protecting both IT and OT environments in a setting where a breach isn't just a data problem - it's a physical safety problem.
MWAA invests in professional development and offers comprehensive benefits alongside career advancement opportunities. The organization staffs diverse departments, and cybersecurity roles sit at the intersection of protecting critical transportation infrastructure and meeting the governance requirements that come with being a quasi-governmental entity. If you're looking for a role where the asset you're protecting has a control tower, this is that job.
