Sr. Systems Security Engineer (Onsite - Cedar Rapids, IA)

Date Posted:  Country:
United States of America

Location:

US-IA-CEDAR RAPIDS-107 ~ 400 Collins Rd NE ~ BLDG 107 Position Role Type:
Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements:
The ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance Type:
DoD Clearance:
Secret Security Clearance Status:
Active and existing security clearance required after day 1

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world.

Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defense industry. With a comprehensive portfolio and deep technical expertise, we help customers meet the demands of the global market. Join us and help shape the future of aerospace and defense.

The Product Cybersecurity team is recruiting Senior Systems Security Engineer. Our shared services team supports the development of products throughout the company wherever the customer has security requirements, or the system is exposed to cyber threats by its connectivity or operational use. We develop tools and testing techniques to highlight residual defects in product design or implementation. These defects can lead to vulnerabilities that negatively impact the confidentiality, integrity, or availability of a system.

Members of the team pursue security excellence by embedding with the design and implementation teams as subject matter experts supporting our Secure System Development Life Cycle (SSDLC). This role will be worked onsite in Cedar Rapids, IA. and will require an active or ability to obtain a SECRET clearance. Relocation assistance is available.

• Analyze system data flows to identify attack vectors and assess risks to new and existing products
• Developing threat model / data flow diagrams to ensure data can be properly isolated in motion and at rest
• Ensure proper implementation of security measures during product development
• Develop, deploy and automate security tools for identifying product security flaws
• Help characterize security vulnerabilities for product impact and recommend mitigations
• Follow and guide teams to the adherence of military RMF security processes
• Support organizational adoption of the Avionics SSDLC
• Mentor junior product security engineers advancing their skills and capabilities
• Be encouraged to pursue industry recognized security certifications / post-graduate security degrees
• Reviewing code to identify weaknesses in the implementation of security functions
• Developing and executing fuzzing and penetration tests to evaluate the robustness of the attack surface
• Conducting vulnerability assessments of proposed and in-service systems
• Have opportunities to participate in cybersecurity focused industry committees and working groups

• Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance. Experience in product security or secure system design; including threat modeling or fuzzing/pen testing Embedded software engineering knowledge (Python and Java/C/C++)

• Active Secret clearance
• Knowledge of Threat Models and Data Flow Diagrams
• Data/network security implementations with Operating Systems
• Understanding tailoring and hardening of Operating Systems
• Experience with system and application penetration testing
• Experience with SAST and analyzing security impact of code defects
• Executing System & Application Fuzzing / Resiliency Tests
• Experience with Public Key Infrastructure (PKI)
• Industry recognized security certifications (Sec+, OSCP, CISSP, etc.) are desirable
• Networking knowledge (OSI Layers, protocols, etc.)

Some of our competitive benefits package includes:

• Medical, dental, and vision insurance
• Three weeks of vacation for newly hired employees
• Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
• Tuition reimbursement program
• Student Loan Repayment Program
• Life insurance and disability coverage
• Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal,  protection
• Birth, adoption, parental leave benefits
• Ovia Health, fertility, and family planning
• Adoption…