Principal Software Security Engineer, Onsite

RTX•El Segundo, CA

1d•Onsite

About The Position

At RTX, the world’s largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. We are currently seeking a Principal Software Security Engineer to join our Software Product Assurance team in El Segundo, Los Angeles County, CA as a SW Security Individual Contributor supporting development for the SW Product Assurance (embedded program protection and cyber) of our portfolio of programs at the site.

Requirements

Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) AND a minimum of 8 years of prior relevant experience.
Experience in embedded software security and C, C++
Experience with embedded OS like VxWorks, Embedded Linux, or similar
Experience with Xilinx UltaScale+ MPSoC, Versal, or similar Embedded Processors
Active and transferable U.S. government issued Secret security clearance is required.
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

Nice To Haves

Experience with Static analysis concepts, methods & tools
Experience with Secure boot, containerization and software hardening
Experience with Cryptographic Algorithms
Experience/knowledge of any of the following: Designing, implementing, testing, or fielding real-time security-oriented solutions on Department of War (DoW) programs (embedded experience highly preferred)
Kernel or Device Driver development
Petalinux/Yocto operating systems
Agile/Scrum/Kanban frameworks and DevSecOps environments
Secure Boot
Knowledge of modern computer architecture and hardware technologies including: ARM Architecture
Interface protocols: PCIe, GPIO, I2C, SATA
Field Programmable Gate Arrays (FPGAs)
Application-Specific Integrated Circuits (ASICs)
Using software configuration management and bug tracking tools
Cyber security experience.
Using security-relevant tools and devices for security auditing, network security, host/server security, communication security, or policy management.
Experience with validation and verification of software applications

Responsibilities

Implement Software Security principles to embedded software design, development, integration, and testing of real-time sensor software.
Develop software applications using C and C++ languages on a variety of computing platforms
Ensure the SW Product Assurance processes are followed on our programs
Understand real-time software design and the performance implications associated with specific System Security implementations.
Work closely with cross functional Engineering teams to define and implement Test Driven Multidisciplinary Capability (TDMC) based execution development and deployment requirements.
Work in a common development environment to support and facilitate program ability to leverage specific capabilities.
Interface with customer community to review technical design and support verification of system maturity.