Principal Cybersecurity Engineer – Product Owner

Prattwhitney; North Tewksbury (MA); On-site; USD 108,000 - 205,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k) match

Flexible schedules

Paid time off

Job summary

RTX in Massachusetts is seeking a Product Owner for Patriot Cybersecurity, onsite in Tewksbury. You will own the product vision, backlog, and security-focused roadmap across software, hardware, and networks, performing advanced testing and threat modeling to strengthen Patriot resilience.

You will collaborate with the CPO and CPTL, guide secure development, and ensure RMF/ATO documentation and security policies keep pace with modernization efforts.

Qualifications

• Bachelor's degree in a STEM field and 8+ years in cybersecurity or technical leadership.
• Active and transferable U.S. government security clearance is required.
• Hands-on experience with vulnerability assessment, ethical hacking phases, and remediation.
• Experience with RMF (NIST SP 800-37) and DoD guidance.
• Experience leading Agile teams and defining user stories with acceptance criteria.

Responsibilities

• Own product vision, strategy, and backlog for Patriot cybersecurity capabilities.
• Perform advanced penetration testing and threat modeling.
• Lead secure design improvements using kill chain and threat analysis.
• Coordinate RMF/ATO documentation updates and security policy support.
• Collaborate with engineering and stakeholders to align priorities.
• Guide secure development and risk-based remediation planning.

Skills

Scrum / Agile leadership

Penetration testing

Threat modeling

Backlog management

Secure development

RMF/NIST guidance

Vulnerability assessment

Secure configuration (Windows, RHEL, C

Education

Bachelor’s degree in STEM

Tools

Nessus

ACAS

OpenVAS

SCC

SCAP

STIG Viewer

evaluate-STIG

Job description

Date Posted: 2026-09-24 Country: United States of America Location: US-MA-TEWKSBURY-TB3 ~ 50 Apple Hill Dr ~ CONCORD BLDG, Tewksbury Tb3 300 Concord

Position Role Type: Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance Type: DoD Clearance: Secret Security Clearance Status: Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. We deliver solutions that help our nation and allies defend freedoms and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense. This position is an onsite role in Tewksbury MA. The Patriot Cybersecurity organization is seeking an experienced Product Owner to lead cybersecurity innovation and secure development across emerging software, hardware, and integrated capabilities in the Patriot system. This role serves as the tip of the spear for aligned cybersecurity modernization guiding advanced assessment activities, ethical hacking phases, vulnerability discovery, threat analysis, and recommending mitigation strategies to strengthen Patriot resilience against evolving cyber threats. The PO will lead have a Scrum Master and Scrum Practitioners, drive Agile execution and deliver new cyber capabilities that directly support the cyber objectives. This individual will report to the Chief Product Owner (CPO) and the Cross‑Platform Team Lead (CPTL), influencing technical direction, security posture, development priorities, and product roadmaps for Patriot Cybersecurity. This role operates with minimal oversight, manages moderately sized projects or processes, and is recognized as a subject‑matter expert contributing significantly to modernization strategy and the development of next‑generation cyber capabilities.

What You Will Do

Be a Product Owner for one of the Scrum Teams on Patriot Cyber. Lead product vision, strategy, and backlog ownership for emerging Patriot cybersecurity capabilities spanning software, hardware, networks, and integrated system components. Perform advanced penetration testing and ethical hacking activities, including scoping, threat modeling, attack surface analysis, exploitation attempts, impact analysis, and system hardening recommendations. Apply structured frameworks such as the Ethical Hacking Phases and Cyber Kill Chain to identify weaknesses, assess adversary techniques, and guide secure design improvements. Conduct vulnerability scanning and assessment activities and convert findings into prioritized risks, actionable remediation plans, and cybersecurity roadmap updates. Drive application security analysis and secure development requirements for new Patriot software components and modernization initiatives. Integrate outputs from scanning tools, penetration tests, CVA results, RMF changes, and exploitation research into Sprint planning and product decisions. Develop, refine, and maintain cybersecurity architecture artifacts, requirements, strategies, design documents, and security policies supporting modernization efforts. Guide creation and improvement of RMF/ATO documentation including SSP sections, POA&Ms, SAR inputs, PPSM entries, SBOM updates, HW/SW lists, and other CDRLs. Partner closely with engineering, platform owners, and stakeholders to evaluate alternative solutions and ensure secure implementation of system enhancements. Collaborate with leadership (CPO and CPTL) to align product priorities, resolve cross‑platform dependencies, and influence cybersecurity modernization strategy. Work independently with minimal oversight to investigate complex, undefined cyber problems, gather technical data, perform analysis, and recommend system‑level improvements. Communicate frequently with internal programs, external partners, and cross‑discipline stakeholders to guide secure development and influence policies and cybersecurity standards.

Qualifications

• Bachelor’s degree in a STEM field and 8+ years of relevant cybersecurity, engineering, or technical product leadership experience
• Active and transferable U.S. government issued security clearance is required prior to start date
• U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
• Advanced expertise in cybersecurity fundamentals, compliance requirements, and RMF (NIST SP 800‑37)
• Hands‑on experience performing vulnerability assessment, ethical hacking phases, kill‑chain analysis, and remediation recommendation
• Experience with NSA (FIPS), NIST (SP 800 series), DISA STIGs, and USCYBERCOM cybersecurity guidance
• Experience with secure configuration and administration of Windows, RHEL, and common network platforms (e.g., Cisco)
• Proficiency with cybersecurity and vulnerability assessment tools such as Nessus, ACAS, OpenVAS, SCC, SCAP, STIG Viewer, and evaluate‑STIG
• Experience leading or facilitating Agile teams; familiarity working with Scrum Masters and Scrum Practitioners
• Ability to define, refine, and communicate technical user stories, acceptance criteria, and backlog items
• Demonstrated capability to analyze complex cybersecurity test results, threat behavior, and data to drive decisions

Preferred Qualifications

• Ethical hacking or penetration testing certifications (CEH, OSCP, GPEN, or similar)
• Familiarity with DoDI 8510.01 and A&A/ATO processes within DoD environments
• Experience supporting Army cybersecurity programs, Penetration Testing efforts, Assessment efforts or Patriot system components
• Experience writing detailed user stories, estimating work, and decomposing features as a Scrum Practitioner
• DoDI 8570.01 Level III certification (IAT/IAM/IASAE) preferred
• Security‑related network or operating system certifications (Cisco, Microsoft, Red Hat, etc.)
• Ability to work independently as a self‑starter while influencing policies, engineering practices, and cross‑team decision‑making
• Broad knowledge of project management concepts and multi‑platform system integration within RTX/Patriot programs

Additional Information

This position is classified as: Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in‑person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.

The salary range for this role is 107,500 USD - 204,500 USD. The salary range provided is a good faith estimate representative of all experience levels.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

Benefits

• medical
• dental
• vision
• life insurance
• short-term disability
• long-term disability
• 401(k) match
• flexible spending accounts
• flexible work schedules
• employee assistance program
• Employee Scholar Program
• parental leave
• paid time off
• holidays
• Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective‑bargaining agreement
• Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance.

Equal Opportunity and Diversity

RTX is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class.

RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

Privacy Policy and Terms:

RTX is an aerospace and defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry‑leading businesses – Collins Aerospace, Pratt & Whitney, and Raytheon. Its 195,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, Virginia.