Senior Principal Systems Engineer - Product Security

BAE Systems • Endicott, NY

82d • $118,504 - $201,457 • Hybrid

About The Position

Join Our Team of Systems Engineering Experts! We're seeking talented Sr. Principal Systems Engineer with Product Security expertise to join our team at our Endicott, NY location. As a Sr. Principal Systems Engineer, you'll have the opportunity to work on cutting-edge projects that shape the future of avionics and electronic controls. Our Controls & Avionics Solutions (CAS) business is at the forefront of avionics innovation, developing next-generation fly-by-wire flight controls, full authority digital engine controls, and power management systems. Our Power & Propulsion Solutions (PPS) business is revolutionizing the way we think about power management, developing eco-friendly, hybrid, and electric systems that keep our air cleaner.

Requirements

• Bachelor's degree in related engineering field.
• 8+ years of experience in avionics or electronic embedded controls development.
• Experience leading the architecture, design, and integration of electronic control systems which include hardware, software and programmable logic devices.
• Experience in full lifecycle including requirements, design, integration, validation, and verification.
• Experience performing threat assessments on embedded controls.
• Technical writing skills: capable of creating required engineering documentation.

Nice To Haves

• Master's Degree in a related engineering field
• 10+ years of experience in avionics or electronic embedded controls development, including familiarity with systems such as flight controls, engine controls, or mission systems
• Experience defining requirements for product security features leveraging component level cyber security features including, secure boot, Trusted Execution Environments, cryptographic accelerators, Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs).
• Experience translating cybersecurity concepts including; confidentiality, integrity, availability, authentication and authorization into functional product security requirements for the system being developed.
• Experience applying any of the following security processes; DoD Risk Management Framework (RMF), DO-326A Airworthiness Security Process Specification or ISO-21434 Road Vehicle Security.
• 2+ years of experience using MBSE/SYSML tools such as MagicDraw/Cameo
• Understanding of cryptographic objects, algorithms, and protocols
• Experience with DISA STIGs and/or IAVA compliance hardening
• Experience with safety critical development guidelines including; ARP4754, DO-178B/C, DO-254, ISO-26262 or equivalent safety process requirements.
• Understanding of offensive security principles.
• Experience with MITRE's CVEs, CWEs, CAPEC and ATT&CK.
• Understanding of purpose and usage of; cryptographic objects: Keys, Certs, CRLs; algorithms: SHA, AES, RSA, ECC, HMAC, GMAC, etc., and protocols: TLS/DTLS, IPSec, etc.
• Experience performing security testing on embedded control including; scanning or fuzzing or pen-testing using industry standard tools.
• Team player with a proactive attitude and the ability to be productive in a dynamic/collaborative environment
• Demonstrated experience providing technical leadership
• Motivated self-starter with good problem-solving skills, judgment, and analytical capability

Responsibilities

• Prepare and/or review documentation for system designs and architectures in accordance with established systems development processes and procedures.
• Verify and validate moderately complex aspects of systems designs to ensure conformance with functional specifications and customer requirements.
• Architect product security features into real-time safety critical embedded control systems.
• Decomposing customer product security requirements into feature-set capability requirements allocated to hardware, programmable logic devices, software and supporting engineering groups.
• Participate in threat/vulnerability assessments applying designated guidelines to identify required security measures to mitigate the security risks.
• Perform system/product integration.

Benefits

• A dynamic and collaborative work environment
• Opportunities to work on cutting-edge projects that shape the future of avionics and electronic controls
• Professional development opportunities to help you grow your skills and career
• A competitive salary and benefits package
• A hybrid work environment where you will balance your time working on site and remote
• A 9/80 - work schedule (every other Friday off)
• Health, dental, and vision insurance
• Health savings accounts
• 401(k) savings plan
• Disability coverage
• Life and accident insurance
• Employee assistance program
• Legal plan
• Discounts on home, auto, and pet insurance
• Paid time off
• Paid holidays
• Paid parental leave
• Military leave
• Bereavement leave
• Federal and state sick leave
• Company recognition program

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Transportation Equipment Manufacturing
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees