Principal Cybersecurity Software Engineer P4 (Onsite)

RTX•East Hartford, CT

4d•$107,500 - $204,500•Onsite

About The Position

Control & Diagnostic Systems (CDS) is a dynamic engineering organization focused on the development and certification of military, commercial and industrial gas turbine engine control and diagnostic systems. CDS is responsible for all aspects of Pratt & Whitney engine control and diagnostic system development including requirements analysis & definition, system & software architecture, algorithm design and product cybersecurity, verification & validation. We integrate the control and diagnostic system design across other engine system modules and with the air vehicles and provide support throughout the complete engine product life cycle. The Cybersecurity team is part of the Real-Time Embedded Systems (RTES) discipline within CDS. RTES is responsible for the foundational software layer that abstracts the hardware and manages the resources for engine control and prognostic and health management applications for P&W engines using state-of-the-art technologies, tools & methodologies.

Requirements

Bachelor’s degree in Science, Technology, Engineering or Mathematics (STEM)
8 years of engineering experience, or an Advanced Degree and 5 years’ experience
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Active and existing security clearance required after day 1

Nice To Haves

Familiarity with NIST Cybersecurity Framework (CSF) and Risk Management Framework (RMF)
Strong focus on cybersecurity process, governance, and policies
Exposure to key management lifecycle
Demonstrate initiative, reliability working across organizational boundaries
Background in aviation safety processes

Responsibilities

Lead the requirements definition, architecture, and low-level design of embedded product cybersecurity software.
Ensure compliance with cybersecurity requirements while maintaining adherence to airworthiness standards MIL-STD-516 and/or DO-178.
Lead vulnerability assessments, penetration testing, Fuzzing / Resiliency Tests and other security evaluation.
Develop, deploy and automate security tools.
Foster adoption of the Avionics Secure Software Development Lifecycle (SSDLC).
Coach and delegate work to lower-level professionals, review technical output, and identify key process improvements to increase organizational efficiency.