Principal System Security Engineer - P4 (Onsite-Woburn, MA)

RTX•Woburn, MA

4d•$118,300 - $224,900•Onsite

About The Position

Raytheon is seeking a Principal System Security Engineer (P4) to join its Systems Security Engineering team, developing holistic security solutions that leverage cybersecurity, software assurance, and program protection implementation for National Security Systems. The role contributes to protecting the Warfighter’s technology advantage and is based onsite in Woburn, Massachusetts. The engineer works with customers to define system security engineering requirements, architectures, solutions, and trade studies; develops and maintains cybersecurity capabilities; and ensures compliance with NIST Risk Management Framework controls. The position also involves system and subsystem requirements development, project planning and tracking, risk management, technical consultation and briefings, security testing and integration, technical documentation, and proposal support.

Requirements

Typically requires a bachelor’s degree in Science, Technology, Engineering, or Mathematics (STEM) and 8 years of prior relevant experience.
Ability to obtain and maintain a U.S. government-issued security clearance; U.S. citizenship is required.
Experience in System Security Engineering, Cybersecurity Engineering, System Administration, or IT/Network Administration.
Experience with the NIST Risk Management Framework (RMF).

Nice To Haves

Active and transferable U.S. government-issued Secret security clearance.
Managerial or leadership experience.
Hands-on experience with cybersecurity tools and products, including antivirus, host-based or endpoint security solutions such as HIDS/HIPS, MFA, SIEM, and centralized auditing tools such as Splunk, IBM QRadar, or Elasticsearch.
Linux Bash or Python scripting; comfort using the Linux/Unix command line; and experience with automation or orchestration tools such as Ansible.
Security systems engineering experience involving computer hardware, software operating systems, and applications in stand-alone air-gapped environments and LAN/WAN configurations.
Experience with virtualization and containerization technologies and building and securely configuring virtual machine images; experience with hypervisors such as VMware, OpenShift, or vSphere.
DoDI 8570.01-M IAT Level-II compliant certification, such as Security+, CISSP, CEH, or equivalent.
Experience with security features or vulnerability analysis of operating systems defined by DoD or intelligence agencies; vulnerability or cybersecurity threat research; and Tenable Nessus.
Experience with IT, network, or system security administration, including operating-system security configuration, hardening and patching, and account management best practices for UNIX, Microsoft Windows/Server, and Red Hat Enterprise Linux; DISA STIG hardening experience is a plus.
Experience with IT/network administration and secure configuration of networking devices such as switches, routers, and firewalls, as well as software-defined networking or storage devices; DISA STIG hardening experience is a plus.
Understanding of systems engineering requirements and specifications; experience implementing DoD and Authorization and Accreditation processes, RMF controls, and certification and accreditation documentation to maintain an Authority to Operate (ATO).
Familiarity with the Program Protection Plan (PPP) required by DoDI 5000.02 and DoDI 5200.39, and understanding of DoD technology release and export licensing policies.
General understanding of secure architectures, the systems engineering development lifecycle, and Agile software development methodologies and principles.
Experience with technical documentation and technical writing.
Prior experience in the defense industry working with classified U.S. Government information systems.

Responsibilities

Interact with customers to define SSE requirements, architecture, solutions, trade studies, vendor product analysis, costs, implementation, system impacts, and effectiveness.
Develop, design, integrate, test, and maintain cybersecurity capabilities for National Security Systems.
Ensure compliance with NIST Risk Management Framework controls.
Develop top-level system requirements and flow down requirements and implementation concepts to subsystems.
Develop plans and estimates; execute tasks; track projects; report status; and identify and mitigate risks.
Consult with and assist program management on SSE architecture and issues, and deliver technical briefings to leadership.
Define security development and test efforts and implement security controls for networking devices, databases, operating systems, and hardware and software components; provide associated technical documentation.
Integrate cybersecurity development activities and support test and integration activities.
Support the development of bids and proposals.

Benefits

Relocation assistance is available to eligible candidates.
Medical insurance
Dental insurance
Vision insurance
Life insurance
Short-term disability insurance
Long-term disability insurance
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off
Holidays
Annual short-term and/or long-term incentive compensation programs may be available depending on position level and collective-bargaining coverage.