Principal Embedded Systems Security Engineer (Onsite - Cedar Rapids, IA)

RTX•Cedar Rapids, IA

5d•Onsite

About The Position

The Product Cybersecurity team is recruiting a Principal Embedded Systems Security Engineer for leading all phases of the Secure System Development Life Cycle. Our team supports development of products throughout the company wherever customers have security requirements, or the system is exposed to cyber threats via connectivity or operational use. Our team works on many aspects of cybersecurity including security control trades, concept of operations, pursuits, requirements development, secure architecture and design, secure coding, security testing, certification support and in-service support within avionics. Candidates are expected to be fluent in the latest security technologies and trends while applying them to embedded systems. This role involves identifying cyber threats and associated risks to new and existing products, influencing architectural designs, ensuring proper security implementation during development, and focusing on testing strategies to verify mitigation of perceived risks. This role will be worked onsite in Cedar Rapids, IA. and will require an active or ability to obtain a SECRET clearance.

Requirements

Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 8 years prior relevant experience or an Advanced Degree in a related field and minimum 5 years of experience
U.S. citizenship is required , as only U.S. citizens are eligible for a security clearance.
Experience in product cybersecurity, embedded software engineering, or secure system design
Embedded software engineering knowledge (Python and Java/C/C++)
Experience analyzing systems and security architectures
Active and existing security clearance required after day 1

Nice To Haves

Active Secret clearance
Reviewing system and application vulnerabilities, threat models, and providing mitigations
Hands-on experience with static analysis and analyzing security impact of code defects
Executing System & Application Fuzzing / Resiliency Tests
Analysis experience of SELinux policies for proper process isolation/separation
Data/network security implementations and understand hardening with Operating Systems
Experience with system and application penetration testing
Experience with Public Key Infrastructure (PKI)
Experience with Military RMF process ando RTCA DO-326A / DO-356A
Security certifications (Sec+, OSCP, CISSP, etc.)
Networking knowledge (OSI Layers, protocols, etc.)
Curiosity and desire to continuously learn security concepts; willingness to share your knowledge within the organization

Responsibilities

Be the security subject matter expert and lead for programs; work amongst system and software teams
Analyze systems to identify attack vectors and assess risks for new and existing products
Advising program leaders for inclusion of security technologies in strategic product roadmaps
Ensure proper implementation of security measures during product development
Develop, deploy and automate security tools and testing for identifying product security flaws
Characterize security vulnerability assessments and recommend mitigations for products
Guide adherence to military RMF processes and DO-326A/DO-356A Airworthiness Security process
Foster organizational adoption of the Avionics SSDLC
Evaluate & contribute to technical proposals and bids/pursuits
Mentor junior product security engineers advancing their skills and capabilities
Participate in cybersecurity focused industry committees and working groups

Benefits

Relocation assistance is available.
Medical, dental, and vision insurance
Three weeks of vacation for newly hired employees
Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
Tuition reimbursement program
Student Loan Repayment Program
Life insurance and disability coverage
Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
Birth, adoption, parental leave benefits
Ovia Health, fertility, and family planning
Adoption Assistance
Autism Benefit
Employee Assistance Plan, including up to 10 free counseling sessions
Healthy You Incentives, wellness rewards program
Doctor on Demand, virtual doctor visits
Bright Horizons, child and elder care services
Teladoc Medical Experts, second opinion program
Annual short-term and/or long-term incentive compensation programs