Sr. Systems Security Engineer (Onsite - Cedar Rapids, IA)

Location

US-IA-CEDAR RAPIDS-107 ~ 400 Collins Rd NE ~ BLDG 107

US-IA-CEDAR RAPIDS-107 ~ 400 Collins Rd NE ~ BLDG 107

United States of America

Onsite

The ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

DoD Clearance:
Secret

Active and existing security clearance required after day 1

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world.

Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defense industry. With a comprehensive portfolio and deep technical expertise, we help customers meet the demands of the global market. Join us and help shape the future of aerospace and defense.

• Analyze system data flows to identify attack vectors and assess risks to new and existing products
• Developing threat model / data flow diagrams to ensure data can be properly isolated in motion and at rest
• Ensure proper implementation of security measures during product development
• Develop, deploy and automate security tools for identifying product security flaws
• Help characterize security vulnerabilities for product impact and recommend mitigations
• Follow and guide teams to the adherence of military RMF security processes
• Support organizational adoption of the Avionics SSDLC
• Mentor junior product security engineers advancing their skills and capabilities
• Be encouraged to pursue industry recognized security certifications / post-graduate security degrees
• Reviewing code to identify weaknesses in the implementation of security functions
• Developing and executing fuzzing and penetration tests to evaluate the robustness of the attack surface
• Conducting vulnerability assessments of proposed and in-service systems
• Have opportunities to participate in cybersecurity focused industry committees and working groups

• Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience
• U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.
• Experience in product security or secure system design; including threat modeling or fuzzing/pen testing
• Embedded software engineering knowledge (Python and Java/C/C++)

• Active Secret clearance
• Knowledge of Threat Models and Data Flow Diagrams
• Data/network security implementations with Operating Systems
• Understanding tailoring and hardening of Operating Systems
• Experience with system and application penetration testing
• Experience with SAST and analyzing security impact of code defects
• Executing System & Application Fuzzing / Resiliency Tests
• Experience with Public Key Infrastructure (PKI)
• Industry recognized security certifications (Sec+, OSCP, CISSP, etc.) are desirable
• Networking knowledge (OSI Layers, protocols, etc.)

• Medical, dental, and vision insurance
• Three weeks of vacation for newly hired employees
• Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
• Tuition reimbursement program
• Student Loan Repayment Program
• Life insurance and disability coverage
• Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance,critical illness insurance, group legal,  protection
• Birth, adoption, parental leave benefits
• Ovia Health, fertility, and family planning
• Adoption Assistance
• Aut…