Sr. Systems Security (Cyber) Engineer (Onsite - Cedar Rapids, IA) Secret Clearance Required

RTX•Cedar Rapids, IA

2d•$86,800 - $165,200•Onsite

About The Position

Join our highly visible team and perform technically challenging assignments, which will closely contribute to protecting our nation and our products. We are seeking a Senior Systems Security (Cybersecurity) Engineer to function as a key contributor for the Strategic Solutions Security Engineering team. As a member of the Strategic Solutions Security Engineering (SSE) team, we want you to develop solutions to secure the Warfighter’s technology advantage. Systems Security Engineering creates security solutions leveraging multiple disciplines like Anti-Tamper (AT), Software Assurance, Hardware Assurance, Cryptography, NSA Type 1 Certification and Supply Chain Risk Management (SCRM) to support Program Protection Implementation on various systems. This role will be worked onsite in Cedar Rapids, IA. Relocation assistance is available. Requires an ACTIVE and Transferable SECRET clearance with the ability to obtain Top Secret clearance after start.

Requirements

Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience
ACTIVE and transferable Secret U.S. government issued security clearance is required prior to start date with the ability to obtain Top Secret clearance
U.S. citizenship is required, as only U.S. citizens are eligible for security clearances
Experience in Security Technical Implementation Guidance (STIG) and Risk Management Framework (RMF)
Experience with Systems Engineering requirements/specifications
Experience implementing DoD and Federal IA Certification and Accreditation Processes, IA controls and developing and maintaining associated certification and accreditation documentation.
Experience with utilizing vulnerability scanning tools – i.e. Tenable Security Center, STIG Viewer, SCAP Compliance Checker/Tools
Experience with Linux Commands

Nice To Haves

Active and transferable U.S. government issued DoD TOP SECRET security clearance.
DoDI 8570.01-M IAT Level-II Compliant Certification (e.g., Security+, CISSP, or equivalent).
Experience with Program Protection Plans (PPP) DoDI 5000.02 and DoDI 5200.39
Experience with implementing highly technical solutions and reporting their importance to program managers and stakeholders

Responsibilities

Support the development, implementation, and maintenance of Risk Management Framework (RMF) artifacts and security control validation activities required to obtain and maintain an Authority to Operate (ATO).
Review proposed system changes and evaluate their cybersecurity impact to ensure modifications do not adversely affect system security or accreditation.
Perform vulnerability assessments, analyze findings, develop mitigation strategies, and document remediation plans.
Implement and validate security improvements by assessing system configurations, identifying vulnerabilities, and applying security best practices.
Develop cybersecurity requirements, system security architecture documentation, boundary diagrams, data flow diagrams, hardware/software inventories, and supporting RMF documentation.
Perform Security Technical Implementation Guide (STIG) implementation, compliance validation, and remediation using tools such as Evaluate STIG, STIG Viewer, and SCAP Compliance Checker.
Conduct vulnerability scanning using Tenable Security Center (Tenable.sc) and Nessus, analyze results, and coordinate remediation efforts.
Provide hands-on Linux systems administration and cybersecurity support for Red Hat Enterprise Linux (RHEL)and other Linux distributions.
Troubleshoot Linux operating system issues including: Network connectivity (DNS, routing, firewalls, interfaces, VLANs, bonding, SSH), System services (systemd), User authentication (LDAP, SSSD, PAM), SELinux policy issues, Storage, file systems, permissions, and process management, Log analysis using journalctl, rsyslog, auditd, and security logs
Perform cybersecurity troubleshooting on Linux systems by: Validating secure configurations, Reviewing running services and open ports, Analyzing firewall configurations (firewalld/iptables/nftables), Verifying certificates and encryption configurations, Investigating authentication failures and audit events, Supporting incident response and forensic data collection
Troubleshoot network communication using the OSI Modeland standard Linux networking tools (ping, traceroute, tcpdump, netstat/ss, nmcli, ip, dig, nslookup, curl, wget).
Collaborate with Software Engineers, Systems Engineers, ISSOs, and Program Managers to integrate cybersecurity requirements into system designs.
Develop technical mitigation statements, risk acceptance packages, and executive-level documentation supporting RMF assessments.
Maintain accurate technical documentation, procedures, and cybersecurity artifacts throughout the program lifecycle.

Benefits

Medical, dental, and vision insurance
Three weeks of vacation for newly hired employees
Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
Tuition reimbursement program
Student Loan Repayment Program
Life insurance and disability coverage
Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
Birth, adoption, parental leave benefits
Ovia Health, fertility, and family planning
Adoption Assistance
Autism Benefit
Employee Assistance Plan, including up to 10 free counseling sessions
Healthy You Incentives, wellness rewards program
Doctor on Demand, virtual doctor visits
Bright Horizons, child and elder care services
Teladoc Medical Experts, second opinion program
Annual short-term and/or long-term incentive compensation programs