Secure Systems Engineer I (Onsite)
About The Position
The Cybersecurity Engineering team is a shared services team supporting product development throughout the Avionics Strategic Business Unit when products have customer security requirements or are exposed to cyber threats through connectivity or operational use. The team develops tools and testing techniques to identify residual design or implementation defects that could affect system confidentiality, integrity, or availability. Team members work with design and implementation teams as subject matter experts and support the Secure System Development Life Cycle (SSDLC). The role involves developing threat models and information-flow architectures to help isolate data in transit and at rest; implementing mandatory access controls through Security Enhanced Linux (SELinux) policies; developing and executing fuzzing, robustness, and penetration tests; reviewing code for weaknesses in security-function implementation; assessing vulnerabilities in proposed and in-service systems; and assisting with security documentation for Airworthiness Certification. This is an onsite role in Cedar Rapids, Iowa. U.S. citizenship is required.
Requirements
- A degree in Science, Technology, Engineering, or Mathematics (STEM) is required.
- Coding experience in C++ or Python.
- Familiarity with the Linux operating system.
- U.S. citizenship is required.
Nice To Haves
- Strong problem-solving and analytical skills, with a demonstrated passion for the field.
- Completed coursework or personal projects focused on embedded systems security.
- Experience with embedded system integration and testing.
- Understanding of IP networking architectures and concepts.
- Knowledge of version control systems such as Git.
- Proficiency in the Microsoft Office Tool Suite.
Responsibilities
- Develop and execute fuzzing and robustness tests to evaluate a product’s attack surface.
- Conduct vulnerability assessments of proposed and in-service systems.
- Embed with development teams to address product security concerns.
- Develop threat models and data-flow diagrams to help ensure data is properly isolated in motion and at rest.
- Assist with implementing mandatory access controls through the development of SELinux policies.
- Assist with creating security documentation to support Airworthiness Certification.
- Review code to identify weaknesses in the implementation of security functions.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Short-term disability
- Long-term disability
- 401(k) match
- Flexible spending accounts
- Flexible work schedules
- Employee assistance program
- Employee Scholar Program
- Parental leave
- Paid time off
- Holidays
- Potential annual short-term and/or long-term incentive compensation
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
