Product Cybersecurity Engineer II; ONSITE

Position: Product Cybersecurity Engineer II (ONSITE)
** Date Posted:
**** Country:
** United States of America
*
* Location:

** HIA
32:
Cedar Rapids, IA 400 Collins Rd NE , Cedar Rapids, IA,  USA
** Position Role Type:
** Onsite
* * U.S. Citizen, U.S. Person, or Immigration Status Requirements:
** U.S. citizenship is required, as only U.S. citizens are authorized to access information under this program/contract.
** Security Clearance:
** None/Not Required The Avionics Product Cybersecurity Engineering team is looking for a Cybersecurity Engineer II.  The Cybersecurity Engineering team is a shared services team that supports the development of products throughout the Avionics Strategic Business Unit wherever the customer has security requirements, or the system is exposed to cyber threats by it’s connectivity or operational use.  We develop tools and testing techniques to highlight residual defects in product design or implementation.  

These defects can lead to vulnerabilities that negatively impact the confidentiality, integrity, or availability of a system.  Members of the security engineering team pursue security excellence by embedding with the design and implementation teams as subject matter experts supporting our Secure System Development Life Cycle (SSDLC).Supporting this Cyber Security Engineering team’s mission involves: developing threat models and information flow architectures to ensure data can be properly isolated in motion and while at rest, implementing mandatory access controls (MAC) through the development of Security Enhanced Linux (SELinux) policies, developing and executing fuzzing and penetration tests to evaluate the robustness of the exposed attack surface, reviewing code to identify weaknesses in the implementation of security functions, and conducting vulnerabilities assessments of proposed and in-service systems.

This is an onsite position based in Cedar Rapids, Iowa.
*
* What You Will Do:

*** Developing and executing fuzzing and robustness tests to evaluate a products attack surface
* Conducting vulnerability assessments of proposed and in-service systems
* Embedding with development teams to address product security concerns
* Developing threat model / data flow diagrams to ensure data can be properly isolated in motion and at rest
* Assisting w/ implementing mandatory access controls (MAC) through the development of SELinux policies
* Assisting with creation of security documentation to support Airworthiness Certification
** Qualifications You Must Have:
*** Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 2 years of prior relevant experience or an Advanced Degree in a related field
* ** U.S. citizenship is required**, as only U.S. citizens are authorized to access information under this program/contract.
* Experience coding in C, C++, Python or Rust
* Candidates for this position should be fluent in the software development domain and have a passion for cybersecurity
** Qualifications We Prefer:
*** Advanced degree in Cybersecurity is preferred
* Embedded software development experience in Linux OS environment
* Networking experience - Layer 2/Layer 3/Layer 4 protocols
* Knowledge of Threat Models and Data Flow Diagrams
* Data/network security implementations with Linux OS
* Understanding tailoring and hardening of Linux OS
* Familiarity with system and application penetration testing
* Experience with SAST and analyzing security impact of code defects
* Executing System & Application Fuzzing / Resiliency Tests
* Knowledge of Public Key Infrastructure (PKI)
* Industry recognized security certifications (Sec+, OSCP, CISSP, etc.) is desirable
*
* What We Offer:

*
* * Medical, dental, and vision insurance
* Three weeks of vacation for newly hired employees
* Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
* Tuition reimbursement program
* Student Loan Repayment Program
* Life insurance and disability coverage
* Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal,  protection
* Birth, adoption, parental leave…