Senior Principal Systems Security Engineer (Cyber) - P5 (Onsite)

RTX•Marlborough, MA

1d•Onsite

About The Position

At RTX, the world largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. We deliver solutions that help our nation and allies defend freedoms and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense. Raytheon is seeking a well-qualified Senior Principal System Security Engineer (Cyber) - P5 to join our elite Systems Security Engineering (SSE) team for the Systems Directorate in developing solutions to protect the Warfighter’s technology advantage. Systems Security Engineering creates holistic security solutions leveraging Cyber Security, Software Assurance and Supply Chain Risk Management to support Program Protection Implementation on embedded weapons systems. Join our highly visible team and perform technically challenging assignments, which will directly contribute to protecting our nation and our Warfighters. This is an onsite position at Raytheon in Marlborough, MA.

Requirements

Typically requires a Bachelor’s Degree in Science, Technology, Engineering or Mathematics (STEM) and 10 years of prior relevant experience
Active and transferable U.S. government issued Secret security clearance is required prior to start date.
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Experience with National Institute of Standards and Technology (NIST) Risk Management Framework (RMF)
Certification: DoDI 8570.01-M IAT Level-II Compliant Certification (e.g. Security+, CISSP, or equivalent)

Nice To Haves

Managerial experience and/or technical leadership experience
Usage of information security toolsets including anti-virus, Vulnerability Assessment, HIDS/ NIDS. host-based or endpoint security solutions, Multi-Factor Authentication (MFA), and Security Incident and Event Management (SIEM) and centralized auditing tools
familiarity with splunk is preferred
Linux Bash scripting or Python scripting experience
Security systems engineering involving various computer hardware and software S/W operating system and application solutions in both a stand-alone and in LAN/WAN configurations
Security features and/or vulnerability analysis of various operating systems as defined by Intelligence agencies
Experience with IT and/or network and system security administration, including operating system security configuration and account management best practices for UNIX, MS Windows, Red Hat Enterprise Linux, and CISCO systems
Understanding of Systems Engineering requirements, specifications, and
Experience implementing DoD and Federal IA Certification and Accreditation Processes, IA controls and developing and maintaining associated certification and accreditation documentation
Familiar with Program Protection Plan (PPP) required by DoDI 5000.02 and DoDI 5200.39
Experience working on U.S. Government contract proposals as an Information Assurance Engineer subject matter expert

Responsibilities

Interact with the customer to define SSE requirements, solutions, trades, costs, implementation, system impacts, and effectiveness
Develop plans and estimates, task execution, project tracking, reporting, and risk identification and mitigation plans
Ensure compliance with National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) controls
Consult and assist program management with SSE architecture and issues
Support the development of bids and proposals
Define security development and test efforts implementation of security controls of networking devices, databases, operating systems, and hardware and software component
Integrate cybersecurity development activities
Develop top-level system requirements and flow down requirements and implementation concepts to subsystem
Understanding, and compliance with, DoD technology release and export licensing policies