Embedded Product System Security Engineer II; Onsite - Cedar Rapids, IA

Embedded Product Cybersecurity – System Security Engineer II

Location:

Cedar Rapids, IA. This role requires U.S. citizenship and an active Secret clearance (or the ability to obtain one). Relocation assistance is available.

• Address Common Vulnerabilities and Exposures (CVEs)
• Author, review, and maintain Risk Management Framework (RMF) cybersecurity artifacts
• Guide teams to adhere to military RMF security processes
• Conduct Security Technical Implementation Guide (STIG) investigations
• Support organizational adoption of the Avionics Secure Systems Development Life Cycle (SSDLC)
• Develop and execute fuzzing and penetration tests to evaluate the robustness of the attack surface
• Analyze system data flows to identify attack vectors and assess risks to new and existing products
• Develop threat models and data flow diagrams to ensure data isolation in motion and at rest
• Ensure proper implementation of security measures during product development
• Develop, deploy, and automate security tools for identifying product security flaws
• Help characterize security vulnerabilities for product impact and recommend mitigations
• Review code to identify weaknesses in the implementation of security functions
• Conduct vulnerability assessments of proposed and in-service systems

• Degree in Science, Technology, Engineering or Mathematics (STEM) and at least 2 years of relevant experience, or an advanced degree in a related field
• U.S. citizenship and the ability to obtain and maintain a U.S. government‑issued Secret security clearance
• Embedded software engineering knowledge (Python, Java, C, C++)
• Networking knowledge (OSI layers, ARINC 429 protocols, Wi‑Fi, etc.)
• Product security or secure system design experience, including threat modeling or fuzzing/penetration testing

• Knowledge of the Risk Management Framework (RMF)
• Experience with threat models and data flow diagrams
• Security implementations with operating systems, including tailoring and hardening
• Familiarity with system and application penetration testing
• Experience with Static Application Security Testing (SAST) and code defect impact analysis
• Experience executing system and application fuzzing / resiliency tests
• Knowledge of Public Key Infrastructure (PKI)
• Industry‑recognized security certifications such as CompTIA Security+, OSCP, CISSP, etc.

• Medical, dental, and vision insurance
• Three weeks of vacation for newly hired employees
• Generous 401(k) plan with employer matching and separate employer retirement contribution, including a Lifetime Income Strategy option
• Tuition reimbursement program
• Student loan repayment program
• Life insurance and disability coverage
• Optional coverages: pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal and  protection
• Birth, adoption, parental leave benefits
• Ovia Health, fertility and family planning assistance
• Adoption assistance, autism benefit
• Employee Assistance Plan (up to 10 counseling sessions)
• Healthy You incentives, wellness rewards program
• Doctor on Demand virtual visits
• Bright Horizons child and elder care services
• Teladoc medical experts and second opinion program

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action employment for qualified individuals with a disability and protected veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.