Embedded Product Security System Engineer (Onsite - Cedar Rapids, IA)

RTX•Cedar Rapids, IA

1d•Onsite

About The Position

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defense industry. With a comprehensive portfolio and deep technical expertise, we help customers meet the demands of the global market. Join us and help shape the future of aerospace and defense. Complex systems require world-class protection. We are seeking a driven Secure Systems Engineer to join our Embedded Product Cybersecurity Engineering team and defend mission-critical platforms from evolving cyber threats. This shared services team supports the development of products throughout the company wherever the customer has security requirements, or the system is exposed to cyber threats by its connectivity or operational use. We develop tools and testing techniques to highlight residual defects in product design or implementation. These defects can lead to vulnerabilities that negatively impact the confidentiality, integrity, or availability of a system. Members of the security engineering team pursue security excellence by embedding with the design and implementation teams as subject matter experts supporting our Secure System Development Life Cycle (SSDLC). Candidates for this position should be fluent in the software development domain and have a passion for Product Security, and understand the difference between enterprise cybersecurity and securing embedded systems with physical, real-world impacts. This is an onsite position located in Cedar Rapids, Iowa, an established hub for aerospace and systems engineering excellence. Relocation assistance is available.

Requirements

Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 2 years of prior relevant experience or an Advanced Degree in a related field
Embedded software development experience in Linux OS environment
Experience coding in C, C++, Python or Rust
Networking experience - Layer 2/Layer 3/Layer 4 protocols

Nice To Haves

Familiarity with Aviation cybersecurity standards: RTCA DO-326, DO-356, DO-355
Knowledge of Threat Models and Data Flow Diagrams
Data/network security implementations with Linux OS
Understanding tailoring and hardening of Linux OS
Familiarity with system and application penetration testing
Experience with SAST and analyzing security impact of code defects
Executing System & Application Fuzzing / Resiliency Tests
Knowledge of Public Key Infrastructure (PKI)
Industry recognized security certifications (Sec+, OSCP, CISSP, etc.) is desirable

Responsibilities

Developing threat model / data flow diagrams to ensure data can be properly isolated in motion and at rest
Implementing mandatory access controls (MAC) through the development of SELinux policies
Reviewing code to identify weaknesses in the implementation of security functions
Developing and executing fuzzing and penetration tests to evaluate the robustness of the attack surface
Conducting vulnerability assessments of proposed and in-service systems
Authoring and managing cybersecurity certification artifacts to ensure alignment with industry standards and customer requirements

Benefits

Medical, dental, and vision insurance
Three weeks of vacation for newly hired employees
Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
Tuition reimbursement program
Student Loan Repayment Program
Life insurance and disability coverage
Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
Birth, adoption, parental leave benefits
Carrot Health, fertility, and family planning
Adoption Assistance
Autism Benefit
Employee Assistance Plan, including up to 10 free counseling sessions
Healthy You Incentives, wellness rewards program
Doctor on Demand, virtual doctor visits
Bright Horizons, child and elder care services
Teladoc Medical Experts, second opinion program