> Markdown version of [/jobs/ext/1380426-embedded-product-system-security-engineer-ii-onsite-cedar-rapids-ia](https://www.wearedevelopers.com/jobs/ext/1380426-embedded-product-system-security-engineer-ii-onsite-cedar-rapids-ia). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Embedded Product System Security Engineer II (Onsite - Cedar Rapids, IA) - **Company:** Collins Aerospace - **Location:** Cedar Rapids, IA, United States - **Salary:** $68,900.0 - $131,100.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Software System Penetration Testing, C++ (Programming Language), Code Review, Cyber Security, Embedded Software, Fuzz Testing, OSI Models, Python (Programming Language), Network Security, Systems Development Life Cycle, Data Streaming, Systems Architecture, Wi-Fi Technology, Computer Network Technologies, Software Security, SC Clearance, Static Application Security Testing, Vulnerability Analysis - **Published:** July 22, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=cc9f294b4edf3fef ## About the Role * Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 2 years of prior relevant experience or an Advanced Degree in a related field * U.S. Citizenship is required; the ability to obtain and maintain a U.S. government issued security clearance is required. * Embedded software engineering knowledge (Python and Java/C/C++) * Networking knowledge (OSI Layers, Arnic 429 protocols, WiFi, etc.) * Product security or secure system design; threat modeling or fuzzing/pen testing Qualifications We Prefer: * Risk Management Framework * Knowledge of Threat Models and Data Flow Diagrams * Data/network security implementations with operating systems * Understanding tailoring and hardening of operating systems * Familiarity with system and application penetration testing * Experience with SAST and analyzing security impact of code defects * Executing System & Application Fuzzing / Resiliency Tests * Knowledge of Public Key Infrastructure (PKI) * Industry recognized security certifications (Sec+, OSCP, CISSP, etc.) ## Description The Embedded Product Cybersecurity team is seeking a System Security Engineer II - Embedded Product to support the secure development of safety- and mission-critical embedded systems. Our work focuses on the protection of resource-constrained, real-time, and connectivity-enabled products throughout their operational lifecycle. As part of our shared services organization, we partner with programs across the company wherever customer security requirements apply or where system architecture, interfaces, and deployment environments introduce cyber-physical risk. Our team develops specialized tools, analysis methods, and test techniques to uncover residual design or implementation defects that could become exploitable vulnerabilities affecting the confidentiality, integrity, or availability of embedded systems. We work directly with architecture, design, and implementation teams as cybersecurity subject matter experts, guiding secure design decisions, threat modeling, and verification activities throughout the Secure System Development Life Cycle (SSDLC). This role will be worked onsite in Cedar Rapids, IA and will require an active or ability to obtain a Secret clearance. Relocation assistance is available. What You Will Do: * Address Common Vulnerabilities and Exposures (CVEs) * Author, review Risk Management Framework (RMF) cybersecurity artifacts * Follow and guide teams to the adherence of military RMF security processes * Conduct Security Technical Implementation Guide (STIG) investigations * Support organizational adoption of the Avionics SSDLC * Develop and execute fuzzing and penetration tests to evaluate the robustness of the attack surface * Analyze system data flows to identify attack vectors and assess risks to new and existing products * Develop threat model / data flow diagrams to ensure data can be properly isolated in motion and at rest * Ensure proper implementation of security measures during product development * Develop, deploy and automate security tools for identifying product security flaws * Help characterize security vulnerabilities for product impact and recommend mitigations * Review code to identify weaknesses in the implementation of security functions * Conduct vulnerability assessments of proposed and in-service systems ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What Makes Open Source Work: Licensing and Beyond](https://www.wearedevelopers.com/videos/1416-what-makes-open-source-work-licensing-and-beyond) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Going Quantum: The future of the internet ...](https://www.wearedevelopers.com/videos/672-going-quantum-the-future-of-the-internet) - [Build a CI/CD pipeline to automate code reviews and ensure code quality](https://www.wearedevelopers.com/videos/349-build-a-ci-cd-pipeline-to-automate-code-reviews-and-ensure-code-quality) - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)