Senior Systems & Security Engineer

Safran; Brea (CA); On-site; USD 112,000 - 127,000; Full time

Benefits offered by this job

Home workspace allowance

Discretionary bonus

401(k) with company match

Paid time off + year-end shutdown

9/80 alternative work schedule with bi

Annual holidays

Job summary

Safran is seeking a Senior Systems & Security Engineer to lead system-level engineering for SATCOM and In-Flight Connectivity (IFC) products. You will translate customer needs into system requirements, design interfaces, and help certify security across airborne systems.

With 6+ years in systems engineering and hands-on threat modeling, you’ll mentor peers, manage complex R&D projects, and collaborate with hardware, software, and systems teams to embed cybersecurity from design through

Qualifications

• Bachelor's Degree in Engineering or equivalent experience in a related field.
• 6+ years of experience working as Systems Engineer.
• Working knowledge of security standards/guidelines (e.g. DO-326A/ED-202A, ISO 27000, ARINC 811).
• Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling (EDR, SIEM, vulnerability management).
• Knowledge of penetration testing tools (e.g. Kali Linux, Nmap, Burp Suite, Nessus/OpenVAS).
• Cybersecurity DO-326A/355, TARA, penetration testing for aircraft systems.
• Logging and auditability of software load events.

Responsibilities

• Translate customer needs into system, sub-system, and equipment requirements; create and maintain Use Cases and requirement documents.
• Perform high-level system and sub-system design, including design and verification of sub-system interfaces.
• Analyze and verify that designs meet requirements.
• Participate in design reviews with internal teams and customers.
• Manage technical projects and work packages, including R&D.
• Mentor junior colleagues on products and systems-engineering practices.
• Scout the market for emerging technologies for potential adoption.
• Support aircraft and inflight-connectivity system security across design and deployment.
• Lead or support incident response and monitor for intrusions.
• Prepare and document security test cases and scenarios.
• Collaborate with hardware/software teams translating cybersecurity requirements into tasks.

Skills

Threat modeling

Secure coding (C/C++/Go)

Cloud platforms (AWS, Azure)

Security tooling (EDR, SIEM)

Vulnerability mgmt tools

Penetration testing tools (Kali Linux,

Education

Bachelor's Degree in Engineering

Tools

Nessus/OpenVAS

Burp Suite

Kali Linux

Nmap

Job description

The Senior Systems & Security Engineer performs system-level engineering work, in particular for requirements definition and verification, system and sub-system design and analysis, use case definition, and interface design. The tasks cover all technical activities related to the SATCOM and In-Flight Connectivity (IFC) products of the company. So, deep technical knowledge and a willingness to learn is required, since the person is normally the natural reference, internally and towards external partners (customers and suppliers), for many technical questions. The preparation, maintenance, and control of the company's technical documentation is also part of the person's responsibilities.

Responsibilities

• Translate customer needs into system, sub-system, and equipment requirements; create and maintain corresponding Use Cases and requirement documents
• Perform high-level system and sub-system design, including design and verification of sub-system interfaces
• Analyze and verify that designs meet requirements
• Participate in creation and presentation of design reviews, internally and with customers
• Manage technical projects and work packages, including in R&D projects as required
• Mentor junior colleagues on company products and systems-engineering practices
• Scout the market for relevant emerging technologies and initiate investigation for potential adoption into company products
• Support aircraft and inflight-connectivity system security, including:
• Designing and integrating embedded cybersecurity features across wired and wireless systems, on and off the aircraft, with security built in from initial design through deployment and ongoing maintenance
• Writing security deliverables and managing OEM-mandated product security documentation to support certification and regulatory (airworthiness) compliance
• Defining and applying security assurance processes
• Performing threat modeling, vulnerability assessments/tracking, security risk assessments, and penetration testing on software, hardware, and networked aircraft systems
• Assisting in system security architecture definition
• Leading or supporting incident response (including CSIRT activities), monitoring for intrusions and emerging threats, investigating incidents, and optimizing security tooling
• Preparing, planning, and documenting security test cases and scenarios
• Responding to customer security-related requests
• Collaborating with hardware, software (Android/Linux), and systems engineering teams, translating OEM and industry cybersecurity requirements into actionable engineering tasks
• Continuously contribute to process improvement
• Perform other job-related duties as assigned

Requirements

• Bachelor's Degree in Engineering or equivalent experience in a related field
• 6+ years of experience working as Systems Engineer
• Working knowledge of at least one of the following security standards/guidelines (e.g. DO-326A/ED-202A series, ISO 27000, ARINC 811)
• Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems
• Knowledge of penetration testing tools (e.g. Kali Linux, nmap, Burp Suite, vulnerability scanners (Nessus, OpenVAS)) is advantageous
• Cybersecurity Requirements (DO-326A / DO-355)
• Threat and risk assessment (TARA) for all external interfaces
• Penetration testing per aircraft-level security plan
• Intrusion detection on aircraft-side gateways
• Certificate lifecycle management for ground-to-air TLS sessions
• Logging and auditability of all software load events (your syslog is an example of this in practice)

Benefits

The starting pay range for this position is $112,000 to $127,000 per year; however, the base pay offered may vary depending on the level of the position, skills, experience, job-related knowledge, and location.

• A home allowance to elevate your home workspace
• Discretionary bonus program
• Future financial security with a 401(k) program with company match
• Paid time off covering vacations, personal time off and sick days, capped off by an exciting year-end holiday shutdown
• Embraced flexibility with our alternative work schedule (9/80) to navigate your workweeks with every other Friday off