Principal Embedded Systems Security Engineer (Onsite - Cedar Rapids, IA)
About The Position
The Product Cybersecurity team is recruiting a Principal Embedded Systems Security Engineer for leading all phases of the Secure System Development Life Cycle. Our team supports development of products throughout the company wherever customers have security requirements, or the system is exposed to cyber threats via connectivity or operational use. Our team works on many aspects of cybersecurity including security control trades, concept of operations, pursuits, requirements development, secure architecture and design, secure coding, security testing, certification support and in-service support within avionics. Candidates are expected to be fluent in the latest security technologies and trends while applying them to embedded systems. This role involves identifying cyber threats and associated risks to new and existing products, influencing architectural designs, ensuring proper security implementation during development, and focusing on testing strategies to verify mitigation of perceived risks. This role will be worked onsite in Cedar Rapids, IA. and will require an active or ability to obtain a SECRET clearance. Relocation assistance is available.
Requirements
- Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 8 years prior relevant experience or an Advanced Degree in a related field and minimum 5 years of experience
- U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.
- Experience in product cybersecurity, embedded software engineering, or secure system design
- Embedded software engineering knowledge (Python and Java/C/C++)
- Experience analyzing systems and security architectures
Nice To Haves
- Active Secret clearance
- Reviewing system and application vulnerabilities, threat models, and providing mitigations
- Hands-on experience with static analysis and analyzing security impact of code defects
- Executing System & Application Fuzzing / Resiliency Tests
- Analysis experience of SELinux policies for proper process isolation/separation
- Data/network security implementations and understand hardening with Operating Systems
- Experience with system and application penetration testing
- Experience with Public Key Infrastructure (PKI)
- Experience with Military RMF process ando RTCA DO-326A / DO-356A
- Security certifications (Sec+, OSCP, CISSP, etc.)
- Networking knowledge (OSI Layers, protocols, etc.)
- Curiosity and desire to continuously learn security concepts; willingness to share your knowledge within the organization
Responsibilities
- Be the security subject matter expert and lead for programs; work amongst system and software teams
- Analyze systems to identify attack vectors and assess risks for new and existing products
- Advising program leaders for inclusion of security technologies in strategic product roadmaps
- Ensure proper implementation of security measures during product development
- Develop, deploy and automate security tools and testing for identifying product security flaws
- Characterize security vulnerability assessments and recommend mitigations for products
- Guide adherence to military RMF processes and DO-326A/DO-356A Airworthiness Security process
- Foster organizational adoption of the Avionics SSDLC
- Evaluate & contribute to technical proposals and bids/pursuits
- Mentor junior product security engineers advancing their skills and capabilities
- Participate in cybersecurity focused industry committees and working groups
Benefits
- Medical, dental, and vision insurance
- Three weeks of vacation for newly hired employees
- Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
- Tuition reimbursement program
- Student Loan Repayment Program
- Life insurance and disability coverage
- Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
- Birth, adoption, parental leave benefits
- Ovia Health, fertility, and family planning
- Adoption Assistance
- Autism Benefit
- Employee Assistance Plan, including up to 10 free counseling sessions
- Healthy You Incentives, wellness rewards program
- Doctor on Demand, virtual doctor visits
- Bright Horizons, child and elder care services
- Teladoc Medical Experts, second opinion program
- Annual short-term and/or long-term incentive compensation programs
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
