Senior Systems & Security Engineer

RAVE Aerospace LLC; Brea (CA); On-site; USD 112,000 - 127,000; Full time

Benefits offered by this job

Home office allowance

Discretionary bonus

401(k) with company match

Paid time off & year-end shutdown

9/80 alternate schedule

Job summary

RAVE Aerospace LLC is seeking a Senior Systems & Security Engineer to lead requirements definition and system design for SATCOM and In-Flight Connectivity products, and to maintain essential technical documentation. You will mentor juniors, manage R&D projects, and champion embedded cybersecurity features, threat modeling, and certification activities across hardware, software, and aircraft networks.

A Bachelor’s in Engineering and 6+ years as a Systems Engineer are required, with knowledge of

Qualifications

• Bachelor’s degree in Engineering or equivalent
• 6+ years as Systems Engineer
• Knowledge of DO-326A/ED-202A, ISO 27000, ARINC 811
• Threat modeling and secure coding with C/C++ or Golang
• Knowledge of cloud platforms (AWS, Azure) and security tooling

Responsibilities

• Translate customer needs into system and sub-system requirements and use cases
• Perform high-level system and sub-system design, including interface design
• Verify that designs meet requirements and participate in design reviews
• Mentor junior colleagues and lead R&D projects
• Scout emerging technologies for potential adoption into products
• Design and integrate embedded cybersecurity features across wired/wireless systems
• Support certification and regulatory (airworthiness) processes
• Lead incident response and security monitoring activities
• Collaborate with hardware, software, and systems teams to translate requirements into tasks
• Contribute to process improvements
• Perform other duties as assigned

Skills

Threat modeling

Secure coding

Cloud platforms

Security tooling

Customer/partner liaison

Education

Bachelor’s degree in Engineering

Tools

Kali Linux

Nmap

Burp Suite

Nessus/OpenVAS

Job description

The Senior Systems & Security Engineer performs system-level engineering work, in particular for
requirements definition and verification, system and sub-system design and analysis, use case definition, and interface design. The tasks cover all technical activities related to the SATCOM and In-Flight Connectivity (IFC) products of the company. So, deep technical knowledge and a willingness to learn is required, since the person is normally the natural reference, internally and towards external partners (customers and suppliers), for many technical questions. The preparation, maintenance, and control of the company’s technical documentation is also part of the person’s responsibilities.

Responsibilities

• Translate customer needs into system, sub-system, and equipment requirements; create and maintain corresponding Use Cases and requirement documents
• Perform high-level system and sub-system design, including design and verification of sub-system interfaces
• Analyze and verify that designs meet requirements
• Participate in creation and presentation of design reviews, internally and with customers
• Manage technical projects and work packages, including in R&D projects as required
• Mentor junior colleagues on company products and systems-engineering practices
• Scout the market for relevant emerging technologies and initiate investigation for potential adoption into company products
• Support aircraft and inflight-connectivity system security, including:
• Designing and integrating embedded cybersecurity features across wired and wireless systems, on and off the aircraft, with security built in from initial design through deployment and ongoing maintenance
• Writing security deliverables and managing OEM-mandated product security documentation to support certification and regulatory (airworthiness) compliance
• Defining and applying security assurance processes
• Performing threat modeling, vulnerability assessments/tracking, security risk assessments, and penetration testing on software, hardware, and networked aircraft systems
• Assisting in system security architecture definition
• Leading or supporting incident response (including CSIRT activities), monitoring for intrusions and emerging threats, investigating incidents, and optimizing security tooling
• Preparing, planning, and documenting security test cases and scenarios
• Responding to customer security-related requests
• Collaborating with hardware, software (Android/Linux), and systems engineering teams, translating OEM and industry cybersecurity requirements into actionable engineering tasks
• Continuously contribute to process improvement
• Perform other job-related duties as assigned

• Bachelor’s Degree in Engineering or equivalent experience in a related field
• 6+ years of experience working as Systems Engineer
• Working knowledge of at least one of the following security standards/guidelines
  (e.g. DO-326A/ED-202A series, ISO 27000, ARINC 811)
• Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems
• Knowledge of penetration testing tools (e.g. Kali Linux, nmap, Burp Suite, vulnerability scanners
  (Nessus, OpenVAS)) is advantageous
• Cybersecurity Requirements (DO-326A / DO-355)
• Threat and risk assessment (TARA) for all external interfaces
• Penetration testing per aircraft-level security plan
• Intrusion detection on aircraft-side gateways
• Certificate lifecycle management for ground-to-air TLS sessions
• Logging and auditability of all software load events (your syslog is an example of this in practice)

The starting pay range for this position is $112,000 to $127,000 per year however, the base pay offered may vary depending on the level of the position, skills, experience, job-related knowledge, and location.

In addition to a comprehensive package of health benefits that include company contributions, RAVE Aerospace offers a variety of additional benefits and perks to enhance your work-life balance experience including but not limited to:

• A home allowance to elevate your home workspace
• Discretionary bonus program
• Future financial security with a 401(k) program with company match
• Paid time off covering vacations, personal time off and sick days, capped off by an exciting year-end holiday shutdown
• Embraced flexibility with our alternative work schedule (9/80) to navigate your workweeks with every other Friday off