Principal System Security Engineer - P4 (Onsite-Woburn, MA)

RTX•Woburn, MA

3d•Onsite

About The Position

Raytheon is seeking a Principal System Security Engineer (P4) to join its Systems Security Engineering team. The team develops holistic security solutions for National Security Systems by leveraging cybersecurity, software assurance, and program protection implementation. The role involves technically challenging work that contributes to protecting the technology advantage of the Warfighter and national security systems. This position is onsite at Raytheon in Woburn, Massachusetts. The engineer will work with customers and program teams to define security requirements, architectures, solutions, and implementation plans. They will develop, integrate, test, and maintain cybersecurity capabilities, ensure compliance with NIST Risk Management Framework controls, and provide technical documentation and briefings. The role also supports program management, test and integration activities, and bid and proposal development.

Requirements

Typically requires a bachelor's degree in Science, Technology, Engineering, or Mathematics (STEM) and 8 years of prior relevant experience.
Ability to obtain and maintain a U.S. government-issued security clearance; U.S. citizenship is required.
Experience in Systems Security Engineering, Cybersecurity Engineering, System Administration, or IT/Network Administration.
Experience with the NIST Risk Management Framework (RMF).

Nice To Haves

Active and transferable U.S. government-issued Secret security clearance.
Managerial or leadership experience.
Hands-on experience with cybersecurity tools and products, including antivirus, host-based or endpoint security solutions such as HIDS/HIPS, multi-factor authentication, SIEM, and centralized auditing tools such as Splunk, IBM QRadar, or Elasticsearch.
Linux Bash or Python scripting experience; comfort using the Linux/Unix command line; and experience with automation or orchestration tools such as Ansible.
Security systems engineering experience across computer hardware, software operating systems, and application solutions in standalone air-gapped environments and LAN/WAN configurations.
Experience with virtualization and containerization technologies, building and securely configuring virtual machine images, and hypervisors such as VMware, OpenShift, or vSphere.
DoDI 8570.01-M IAT Level-II compliant certification, such as Security+, CISSP, CEH, or equivalent.
Experience with security features or vulnerability analysis of operating systems as defined by DoD or intelligence agencies, and researching vulnerabilities or cybersecurity threats.
Experience with the Tenable Nessus vulnerability scanning tool suite.
Experience with IT, network, and system security administration, including operating system security configuration, hardening and patching, and account management best practices for UNIX, Microsoft Windows/Server, and Red Hat Enterprise Linux.
Experience with DISA Security Technical Implementation Guide (STIG) hardening of operating systems.
Experience with IT/network administration and securely configuring network devices such as switches, routers, and firewalls, as well as software-defined networking or storage devices.
Understanding of Systems Engineering requirements and specifications; experience implementing DoD authorization and accreditation processes, RMF controls, and certification and accreditation documentation to maintain an Authority to Operate (ATO).
Familiarity with Program Protection Plans (PPP) required by DoDI 5000.02 and DoDI 5200.39.
Understanding of DoD technology release and export licensing policies.
General understanding of secure architectures, the Systems Engineering development lifecycle, and Agile software development methodologies and principles.
Experience with technical documentation and technical writing.
Prior experience working in the defense industry on classified U.S. Government information systems.

Responsibilities

Interact with customers to define Systems Security Engineering requirements, architecture, solutions, trade studies, vendor product analysis, costs, implementation, system impacts, and effectiveness.
Develop, design, integrate, test, and maintain cybersecurity capabilities for National Security Systems.
Ensure compliance with National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) controls.
Develop top-level system requirements and flow down requirements and implementation concepts to subsystems.
Develop plans and estimates; execute tasks; track projects; report progress; and identify and mitigate risks.
Consult with and assist program management on SSE architecture and issues, and deliver technical briefings to leadership.
Define security development and test efforts, including implementation of security controls for networking devices, databases, operating systems, and hardware and software components; provide associated technical documentation.
Integrate cybersecurity development activities and support test and integration activities.
Support development of bids and proposals.

Benefits

Relocation assistance is available.
Medical insurance
Dental insurance
Vision insurance
Life insurance
Short-term disability
Long-term disability
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off
Holidays
Annual short-term and/or long-term incentive compensation may be available, depending on position level and collective-bargaining coverage.