Embedded Product Security Engineer II - Threat Modeling

OpenTalent; Cedar Rapids (IA); On-site; USD 110,000 - 140,000; Full time

Job summary

Collins Aerospace in Cedar Rapids, IA is seeking a System Security Engineer to join our Embedded Product Cybersecurity Engineering team on-site. You will defend mission-critical platforms by embedding with design teams and supporting the Secure SDLC.

This role focuses on threat modeling, SELinux policy implementation, code review, fuzzing, and vulnerability assessments. As part of RTX’s Collins Aerospace, you will contribute to certification artifacts and security testing across products,

Qualifications

• Develop threat models and data flow diagrams to ensure proper isolation of data.
• Implement mandatory access controls through SELinux policies.
• Review code to identify weaknesses in security functions.
• Develop and execute fuzzing and penetration tests to evaluate attack surface.
• Conduct vulnerability assessments of proposed and in-service systems.
• Prepare and manage cybersecurity certification artifacts to meet standards.

Responsibilities

• Develop threat models and data flow diagrams to ensure data can be properly isolated in motion and at rest.
• Implement MAC via SELinux policies in product code paths.
• Review code to identify weaknesses in security function implementations.
• Develop and execute fuzzing and penetration tests to evaluate robustness of attack surfaces.
• Conduct vulnerability assessments of proposed and in-service systems.
• Author and manage cybersecurity certification artifacts to ensure alignment with standards.

Skills

Threat modeling

Penetration testing

Vulnerability assessment

Code review

Secure SDLC

Tools

SELinux

Fuzzing tools

Security testing frameworks

Job description

Collins Aerospace in Cedar Rapids, IA is seeking a System Security Engineer to join our Embedded Product Cybersecurity Engineering team on-site. You will defend mission-critical platforms by embedding with design teams and supporting the Secure SDLC.

This role focuses on threat modeling, SELinux policy implementation, code review, fuzzing, and vulnerability assessments. As part of RTX’s Collins Aerospace, you will contribute to certification artifacts and security testing across products,