DevSecOps Security Engineer

RTX•Andover, MA

7d•Onsite

About The Position

The Technical Services Group (TSG) provides total life cycle management for information systems and business applications supporting RTX programs and products all around the world. We specialize in the development, security, and operation (DevSecOps) of advanced, global mission support systems that provide operational and logistics support to internal RTX programs and product teams as well as to our domestic and international business partners. We are a team of highly-skilled, multi-discipline IT professionals that manage the entire lifecycle of the IT products and services we develop, deploy, and maintain. This role can be based out of Andover, MA As a DevSecOps Security Engineer, you will be joining a highly collaborative team of multi-discipline IT professionals responsible for the development, security, and operation (DevSecOps) of advanced IT products and services supporting RTX programs and products. In this role you will be responsible for the governance, risk and compliance (GRC) of the IT products and services we deliver to our internal and external customers.

Requirements

Typically requires a degree in Science, Technology, Engineering, or Mathematics (STEM) and a minimum of 2 years of prior relevant experience
Solid understanding of information assurance and cybersecurity concepts and experience implementing security controls in information systems and networks.
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
The ability to obtain and maintain a U.S. government issued security clearance is required.

Nice To Haves

Experience with on-premise system and network vulnerability assessment tools such as Nessus, Rapid7, or similar.
Experience with the Splunk observability platform and creating queries, dashboards, and reports to monitor IT products and services.
Experience creating, managing, and maintaining continuous integration and delivery (CI/CD) pipelines for automated security testing. (GitLab Runners, Jenkins)
Experience with static and dynamic application security testing (SAST/DAST) tools like Coverity, SonarQube, and OWASP ZAP.
Experience of Git-based version control systems and experience creating and maintaining code and configuration repositories. (GitLab, GitHub)
Experience with scripting languages. (e.g., Python, PowerShell, or Bash)
Experience with Linux- and/or Windows-based operating systems running in virtual, containerized, and cloud-based operating platforms.
Active cybersecurity certifications such as Security+, GSEC, SSCP, or CISSP Associate recommended.
Willingness and ability to travel domestically and internationally as needed.

Responsibilities

Design, develop, and implement security tools to detect, prevent, and remediate security issues in TSG-managed IT products & services.
Assist in the development and integration of security tooling into CI/CD pipelines to automate and accelerate security testing of IT service assets.
Work with software developers and system engineers to develop security testing automations using static and dynamic application security tools (SAST/DAST).
Provide operational support to internal RTX developers and engineers on common security processes and tools.
Build and maintain dashboards, alerts, and reports for the team's Splunk-based observability platform.
Assist in the implementation and monitoring of security-related performance metrics to identify continuous improvement opportunities for our DevSecOps processes and tools.
Aid in the selection, evaluation, and implementation of security controls to improve the confidentiality, integrity, and availability of deliver IT products and services.
Support cybersecurity compliance related activities such as risk assessments, internal and external audits, and continuous monitoring.