MTS V, Software - Security

Panasonic•Beaverton, OR

About The Position

Panasonic Avionics Corporation is seeking a senior security software engineer to define and own security architecture for avionics-connected systems and supporting infrastructure, from bare-metal Linux hosts to Kubernetes-orchestrated services. The role sets security design baselines, guides engineering teams through airworthiness security compliance, and ensures security controls are integrated into system architecture. The engineer will define end-to-end security architecture for avionics and related systems, lead airworthiness security risk assessments, and develop and validate controls that meet Security Assurance Level 2 objectives. The role works across systems, software, and safety teams to ensure security measures support safety objectives and to justify the security posture of lower-assurance components and their interfaces with higher-DAL systems. The position also covers Linux and Kubernetes security, cryptographic architecture, secure software development and supply-chain practices, architecture reviews, vulnerability management, penetration testing advice, and incident response planning. The engineer will mentor other engineers and communicate security risks to technical and executive audiences. The stated salary range is $142,000–$238,000 annually. Panasonic notes that the final offer may vary based on factors including knowledge, skills, experience, and location.

Requirements

10+ years of software development experience with a bachelor's degree in Computer Sciences, Computer Engineering, or Software Engineering; or an advanced degree (master's or PhD) in one of those fields and 8+ years of software development experience; or 14+ years of related software development experience in lieu of a degree.
Hands-on experience with Security Assurance Level assignment and security assurance evidence.
Deep experience securing Linux on bare-metal systems, including hardening, boot-chain integrity, and kernel and userspace controls.
Strong Kubernetes security experience, including CIS benchmarks, OPA/Gatekeeper or Kyverno, service mesh, and runtime security tooling.
Proficiency in threat-modeling methodologies.
Strong grasp of applied cryptography, PKI, and network security architecture.
Excellent written communication, including authoring certification-grade security documentation.

Nice To Haves

Familiarity with ARINC 811, ARINC 429, and avionics data-bus security.
Experience with NIST SP 800-53/800-82, ISO/IEC 27001, Common Criteria, or IEC 62443.
Experience with hardware roots of trust, secure enclaves, or hardware security modules.
Experience with DevSecOps toolchains and infrastructure as code, such as Terraform, Ansible, and Helm.
Relevant certifications such as CISSP, CISSP-ISSAP, CCSP, CKS, or GIAC (GCSA, GDSA).
Prior interaction with certification authorities such as FAA or EASA on security matters.

Responsibilities

Define end-to-end security architecture for avionics and avionics-adjacent systems, including threat modeling, security zoning, trust boundaries, and data-flow protections.
Lead airworthiness security risk assessments, including security scope definition, threat scenario analysis, and determination of Security Assurance Levels.
Architect and validate controls that meet SAL 2 objectives and produce supporting evidence for certification authorities and customers.
Work with systems, software, and safety teams to ensure security measures do not compromise safety objectives, and justify the security posture of DAL E and other lower-assurance components and their interfaces to higher-DAL systems.
Design and harden bare-metal Linux deployments, including secure boot, kernel hardening, SELinux/AppArmor policy, minimal attack-surface images, disk encryption, TPM integration, and secure updates.
Architect Kubernetes security for on-premises environments, including RBAC, network policy, admission control, pod security standards, secrets management, image signing and provenance, runtime threat detection, and multi-tenant isolation.
Define cryptographic architecture, including key management, PKI, certificate lifecycle, and secure communications and data-at-rest protection.
Establish secure SDLC and supply-chain practices, including SBOMs, dependency and container scanning, signed artifacts, and build-pipeline integrity.
Conduct architecture and design reviews, and advise on penetration testing, vulnerability management, and incident response planning.
Mentor engineers and communicate security risk to technical and executive audiences.

Benefits

Unlimited PTO for exempt salaried employees; non-exempt hourly employees accrue 14 vacation days, 7 sick days, and 3 personal days per year, with accrual increasing with tenure.
11 company-paid holidays per year and a paid company-wide U.S. shutdown between Christmas and New Year.
Medical insurance options through Aetna and Kaiser (California and Hawaii).
Dental PPO and DMO options.
Vision insurance through EyeMed or VSP.
401(k) with a 50% match on up to 8% contribution, fully vested from day one.
Wellness program and counseling services.
FSA and HSA.
Life insurance for employees, spouses, and children; AD&D insurance; long-term and short-term disability; critical illness insurance; and accident insurance.
Legal assistance.
Pet insurance.
Identity theft protection.
Dependent care FLSA.
Education assistance.
Commuter program.
Employee purchase program.
Service award program.