DevSecOps Security Engineer

Date Posted:

Country:
United States of America
Location:
US-MA-ANDOVER-AN0 ~ 366 Lowell St ~ BLDG AN0
Position Role Type:
Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
The ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance Type:
DoD Clearance:
Secret
Security Clearance Status:
Active and existing security clearance required after day 1
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling – to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. Our team solves tough, meaningful problems that create a safer, more secure world.
The Systems Engineering and Test Capabilities (SE&TC) Discipline organization is the central focus for Mission Systems Integration activities within Raytheon, responsible for defining customer needs, functional and product architecture, requirements definition and decomposition, Model Based Systems Engineering (MBSE), system performance, System Security Engineering (SSE), integration and system level testing, identifying and resolving hardware, software, and networking issues, and developing automated or operator-driven tests in support of system-level integration, verification and validation.
Within SE&TC, Life Cycle Engineering (LCE) is responsible for ensuring our products are Safe, Reliable, Maintainable and delivered on time. Life Cycle Engineering consists of multiple disciplines that support engineering, our program offices and our customers. Our Life Cycle Engineering disciplines participate in the total life cycle of our products from conception to deactivation. Our focus area is product support, including the following disciplines:
Logistics, Technical Manuals, Training, Reliability, and Supportability.
The Technical Services Group (TSG) provides total life cycle management for information systems and business applications supporting RTX programs and products all around the world. We specialize in the development, security, and operation (Dev Sec Ops ) of advanced, global mission support systems that provide operational and logistics support to internal RTX programs and product teams as well as to our domestic and international business partners.

We are a team of highly-skilled, multi-discipline IT professionals that manage the entire lifecycle of the IT products and services we develop, deploy, and maintain.
This role can be based out of Andover, MA
As a
Dev Sec Ops  Security Engineer
, you will be joining a highly collaborative team of multi-discipline IT professionals responsible for the development, security, and operation (Dev Sec Ops ) of advanced IT products and services supporting RTX programs and products. In this role you will be responsible for the governance, risk and compliance (GRC) of the IT products and services we deliver to our internal and external customers.
What You Will Do:

• Design, develop, and implement security tools to detect, prevent, and remediate security issues in TSG-managed IT products & services.
• Assist in the development and integration of security tooling into CI/CD pipelines to automate and accelerate security testing of IT service assets.
• Work with software developers and system engineers to develop security testing automations using static and dynamic application security tools (SAST/DAST).
• Provide operational support to internal RTX developers and engineers on common security processes and tools.
• Build and maintain dashboards, alerts, and reports for the team's Splunk-based observability platform.
• Assist in the implementation and monitoring of security-related performance metrics to identify continuous improvement opportunities for our Dev Sec Ops  processes and tools.
• Aid in the selection, evaluation, and implementation of security controls to improve the confidentiality, integrity, and availability of deliver IT products and services.
• Support cybersecurity…