Sr. Systems Security Engineer (Onsite - Cedar Rapids, IA)

RTX•Cedar Rapids, IA

1d•Onsite

About The Position

The Product Cybersecurity team is recruiting a Senior Systems Security Engineer. Our shared services team supports the development of products throughout the company wherever the customer has security requirements, or the system is exposed to cyber threats by its connectivity or operational use. We develop tools and testing techniques to highlight residual defects in product design or implementation. These defects can lead to vulnerabilities that negatively impact the confidentiality, integrity, or availability of a system. Members of the team pursue security excellence by embedding with the design and implementation teams as subject matter experts supporting our Secure System Development Life Cycle (SSDLC). This role will be worked onsite in Cedar Rapids, IA. and will require an active or ability to obtain a SECRET clearance. Relocation assistance is available.

Requirements

Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.
Experience in product security or secure system design; including threat modeling or fuzzing/pen testing
Embedded software engineering knowledge (Python and Java/C/C++)

Nice To Haves

Active Secret clearance
Knowledge of Threat Models and Data Flow Diagrams
Data/network security implementations with Operating Systems
Understanding tailoring and hardening of Operating Systems
Experience with system and application penetration testing
Experience with SAST and analyzing security impact of code defects
Executing System & Application Fuzzing / Resiliency Tests
Experience with Public Key Infrastructure (PKI)
Industry recognized security certifications (Sec+, OSCP, CISSP, etc.) are desirable
Networking knowledge (OSI Layers, protocols, etc.)

Responsibilities

Analyze system data flows to identify attack vectors and assess risks to new and existing products
Developing threat model / data flow diagrams to ensure data can be properly isolated in motion and at rest
Ensure proper implementation of security measures during product development
Develop, deploy and automate security tools for identifying product security flaws
Help characterize security vulnerabilities for product impact and recommend mitigations
Follow and guide teams to the adherence of military RMF security processes
Support organizational adoption of the Avionics SSDLC
Mentor junior product security engineers advancing their skills and capabilities
Be encouraged to pursue industry recognized security certifications / post-graduate security degrees
Reviewing code to identify weaknesses in the implementation of security functions
Developing and executing fuzzing and penetration tests to evaluate the robustness of the attack surface
Conducting vulnerability assessments of proposed and in-service systems
Have opportunities to participate in cybersecurity focused industry committees and working groups

Benefits

Medical, dental, and vision insurance
Three weeks of vacation for newly hired employees
Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
Tuition reimbursement program
Student Loan Repayment Program
Life insurance and disability coverage
Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
Birth, adoption, parental leave benefits
Ovia Health, fertility, and family planning
Adoption Assistance
Autism Benefit
Employee Assistance Plan, including up to 10 free counseling sessions
Healthy You Incentives, wellness rewards program
Doctor on Demand, virtual doctor visits
Bright Horizons, child and elder care services
Teladoc Medical Experts, second opinion program
Annual short-term and/or long-term incentive compensation programs