Embedded Product System Security Engineer II (Onsite - Cedar Rapids, IA)

The Embedded Product Cybersecurity team is seeking a System Security Engineer II - Embedded Product to support the secure development of safety- and mission-critical embedded systems. Our work focuses on the protection of resource-constrained, real-time, and connectivity-enabled products throughout their operational lifecycle. As part of our shared services organization, we partner with programs across the company wherever customer security requirements apply or where system architecture, interfaces, and deployment environments introduce cyber-physical risk.

Our team develops specialized tools, analysis methods, and test techniques to uncover residual design or implementation defects that could become exploitable vulnerabilities affecting the confidentiality, integrity, or availability of embedded systems. We work directly with architecture, design, and implementation teams as cybersecurity subject matter experts, guiding secure design decisions, threat modeling, and verification activities throughout the Secure System Development Life Cycle (SSDLC).

This role will be worked onsite in Cedar Rapids, IA and will require an active or ability to obtain a Secret clearance. Relocation assistance is available.

What You Will Do:

• Address Common Vulnerabilities and Exposures (CVEs)
• Author, review Risk Management Framework (RMF) cybersecurity artifacts
• Follow and guide teams to the adherence of military RMF security processes
• Conduct Security Technical Implementation Guide (STIG) investigations
• Support organizational adoption of the Avionics SSDLC
• Develop and execute fuzzing and penetration tests to evaluate the robustness of the attack surface
• Analyze system data flows to identify attack vectors and assess risks to new and existing products
• Develop threat model / data flow diagrams to ensure data can be properly isolated in motion and at rest
• Ensure proper implementation of security measures during product development
• Develop, deploy and automate security tools for identifying product security flaws
• Help characterize security vulnerabilities for product impact and recommend mitigations
• Review code to identify weaknesses in the implementation of security functions
• Conduct vulnerability assessments of proposed and in-service systems

• Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 2 years of prior relevant experience or an Advanced Degree in a related field
• U.S. Citizenship is required; the ability to obtain and maintain a U.S. government issued security clearance is required.
• Embedded software engineering knowledge (Python and Java/C/C++)
• Networking knowledge (OSI Layers, Arnic 429 protocols, WiFi, etc.)
• Product security or secure system design; threat modeling or fuzzing/pen testing

Qualifications We Prefer:

• Risk Management Framework
• Knowledge of Threat Models and Data Flow Diagrams
• Data/network security implementations with operating systems
• Understanding tailoring and hardening of operating systems
• Familiarity with system and application penetration testing
• Experience with SAST and analyzing security impact of code defects
• Executing System & Application Fuzzing / Resiliency Tests
• Knowledge of Public Key Infrastructure (PKI)
• Industry recognized security certifications (Sec+, OSCP, CISSP, etc.)

3.63.6 out of 5 stars 400 Collins Road NE, Cedar Rapids, IA 52402 $68,900 - $131,100 a year - Full-time, Pulled from the full job description

• Loan repayment program
• Tuition reimbursement
• Pet insurance
• Parental leave
• Health insurance
• 401(k) matching
• Paid time off, What We Offer:
• Medical, dental, and vision insurance
• Three weeks of vacation for newly hired employees
• Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
• Tuition reimbursement program
• Student Loan Repayment Program
• Life insurance and disability coverage
• Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Ovia Health, fertility, and family planning
• Adoption Assistance
• Autism Benefit
• Employee Assistance Plan, including up to 10 free counseling sessions
• Healthy You Incentives, wellness rewards program
• Doctor on Demand, virtual doctor visits
• Bright Horizons, child and elder care services
• Teladoc Medical Experts, second opinion program
• And more!, The salary range for this role is 68,900 USD - 131,100 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.

Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act.

Collins Aerospace makes modern flight possible. Of course, that wouldn't be possible without the capabilities and technologies of our organization, as well as our engineers - a highly skilled, accomplished network that spans more than 180 sites, 24 countries and 6 Strategic Business Units (SBUs). Our industry-leading experts are setting the standards for the aerospace industry and paving the way for the future. But as new challenges present themselves, we need fresh, creative and motivated minds to overcome these hurdles, help us break barriers and achieve new levels of innovation. Do you have what it takes to join a global organization that doesn't shy away from big opportunities? If so, we invite you to join our ranks and create the next generation of aerospace technologies. Together, we will nurture an engineering culture that values intellectual curiosity, risk takers and integrity. A place where we will challenge ourselves, our teams, and the status quo and where we will work to find a way - the right way - to achieve what others can only dream of.