Embedded Product Secure Systems Engineer II Onsite - Cedar Rapids, IA - Collins Aerospace

OpenTalent; Cedar Rapids (IA); On-site; USD 110,000 - 140,000; Full time

Job summary

Collins Aerospace in Cedar Rapids, IA is seeking a System Security Engineer to join our Embedded Product Cybersecurity Engineering team on-site. You will defend mission-critical platforms by embedding with design teams and supporting the Secure SDLC.

This role focuses on threat modeling, SELinux policy implementation, code review, fuzzing, and vulnerability assessments. As part of RTX’s Collins Aerospace, you will contribute to certification artifacts and security testing across products,

Qualifications

• Develop threat models and data flow diagrams to ensure proper isolation of data.
• Implement mandatory access controls through SELinux policies.
• Review code to identify weaknesses in security functions.
• Develop and execute fuzzing and penetration tests to evaluate attack surface.
• Conduct vulnerability assessments of proposed and in-service systems.
• Prepare and manage cybersecurity certification artifacts to meet standards.

Responsibilities

• Develop threat models and data flow diagrams to ensure data can be properly isolated in motion and at rest.
• Implement MAC via SELinux policies in product code paths.
• Review code to identify weaknesses in security function implementations.
• Develop and execute fuzzing and penetration tests to evaluate robustness of attack surfaces.
• Conduct vulnerability assessments of proposed and in-service systems.
• Author and manage cybersecurity certification artifacts to ensure alignment with standards.

Skills

Threat modeling

Penetration testing

Vulnerability assessment

Code review

Secure SDLC

Tools

SELinux

Fuzzing tools

Security testing frameworks

Job description

Date Posted:

Country:

Location:

Position Role Type:

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Security Clearance Type:

Security Clearance Status:

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world.

Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defense industry. With a comprehensive portfolio and deep technical expertise, we help customers meet the demands of the global market. Join us and help shape the future of aerospace and defense.

Complex systems require world-class protection. We are seeking a driven System Security Engineer to join our Embedded Product Cybersecurity Engineering team and defend mission-critical platforms from evolving cyber threats. This shared services team supports the development of products throughout the company wherever the customer has security requirements, or the system is exposed to cyber threats by its connectivity or operational use. We develop tools and testing techniques to highlight residual defects in product design or implementation. These defects can lead to vulnerabilities that negatively impact the confidentiality, integrity, or availability of a system. Members of the security engineering team pursue security excellence by embedding with the design and implementation teams as subject matter experts supporting our Secure System Development Life Cycle (SSDLC).

This is an on-site position located in Cedar Rapids, Iowa, an established hub for aerospace and systems engineering excellence.

Primary Responsibilities:

• Developing threat model / data flow diagrams to ensure data can be properly isolated in motion and at rest
• Implementing mandatory access controls (MAC) through the development of SELinux policies
• Reviewing code to identify weaknesses in the implementation of security functions
• Developing and executing fuzzing and penetration tests to evaluate the robustness of the attack surface
• Conducting vulnerability assessments of proposed and in-service systems
• Authoring and managing cybersecurity certification artifacts to ensure alignment with industry standards and customer requirements