> Markdown version of [/jobs/ext/3826262-mts-v-software-security](https://www.wearedevelopers.com/jobs/ext/3826262-mts-v-software-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# MTS V, Software - Security

- **Company:** Panasonic Avionics Corporation
- **Location:** Beaverton, OR, United States
- **Experience:** Expert
- **Salary:** $142,000.0 - $238,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Software System Penetration Testing, Cyber Security, Computer Networks, Computer Engineering, Linux, Data Flow Control, Hardware Security Module, Information Systems Security Architecture Professional, Key Management, Network Security, Public Key Infrastructure, Role-Based Access Control, Ansible, Security Software, Software Engineering, Toolchain, Software Vulnerability Management, Istio, Selinux, Kubernetes, Information Technology, Bare Metal, CIS Benchmarks, U-Boot, Terraform, Devsecops
- **Published:** October 18, 2026
- **Apply:** https://dejobs.org/x/x/1A4AF6D255F64600A63D47DBEC6CFDE1/job/

## About the Role

* 10+ years of experience in software development with a Bachelor's degree in Computer Sciences, Computer Engineering or Software Engineering;
 * Or Advanced degree (Master's or PhD degree in Computer Sciences, Computer Engineering or Software Engineering) and 8+ years of software development experience;
 * Or 14+ years of related software development experience in lieu of degree.
 * Hands-on experience with Security Assurance Level assignment and security assurance evidence.
 * Deep experience securing Linux on bare-metal systems (hardening, boot chain integrity, kernel and userspace controls).
 * Strong Kubernetes security experience (CIS benchmarks, OPA/Gatekeeper or Kyverno, service mesh, runtime security tooling).
 * Proficiency in threat modeling methodologies.
 * Strong grasp of applied cryptography, PKI, and network security architecture.
 * Excellent written communication, including authoring certification-grade security documentation., * Familiarity with ARINC 811, ARINC 429, and avionics data bus security.
 * Experience with NIST SP 800-53/800-82, ISO/IEC 27001, Common Criteria, or IEC 62443.
 * Experience with hardware roots of trust, secure enclaves, or hardware security modules.
 * Experience with DevSecOps toolchains and infrastructure as code (Terraform, Ansible, Helm).
 * Relevant certifications such as CISSP, CISSP-ISSAP, CCSP, CKS, or GIAC (GCSA, GDSA).
 * Prior interaction with certification authorities (FAA, EASA) on security matters.

## Description

We're looking for a senior security software engineer to define and own the security architecture for our avionics-connected systems and the supporting infrastructure behind them, from bare-metal Linux hosts to Kubernetes-orchestrated services. You will set the security design baseline, guide engineering teams through airworthiness security compliance, and make sure security controls are built into the architecture rather than added afterward.

What you will be doing:

 * Define end-to-end security architecture for avionics and avionics-adjacent systems, including threat modeling, security zoning, trust boundaries, and data-flow protections.
 * Lead airworthiness security risk assessment activities including security scope definition, threat scenario analysis, and determination of Security Assurance Levels.
 * Architect and validate controls that meet SAL 2 objectives, and produce supporting evidence for certification authorities and customers.
 * Work with systems, software, and safety teams to ensure security measures do not compromise safety objectives, and to justify the security posture of DAL E and other lower-assurance components and their interfaces to higher-DAL systems.
 * Design and harden bare-metal Linux deployments: secure boot , kernel hardening, SELinux/AppArmor policy, minimal attack surface images, disk encryption, TPM integration, and secure update mechanisms.
 * Architect Kubernetes security for on-prem environments: RBAC, network policy, admission control, pod security standards, secrets management, image signing and provenance, runtime threat detection, and multi-tenant isolation.
 * Define cryptographic architecture, including key management, PKI, certificate lifecycle, and secure communications (TLS, mTLS, data-at-rest protection).
 * Establish secure SDLC and supply chain practices: SBOMs, dependency and container scanning, signed artifacts, and build pipeline integrity.
 * Conduct architecture and design reviews, and advise on penetration testing, vulnerability management, and incident response planning.
 * Mentor engineers and communicate security risk clearly to technical and executive audiences.