Software Security Lead - Principal Software Engineer - S3E

Prattwhitney; Tucson (AZ); On-site; USD 107,500 - 204,500; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) match

Flexible spending accounts

Paid time off

Job summary

Prattwhitney in Tucson, AZ is seeking a Software Security Lead (SSL) to embed software security practices within the aerospace and defense sector. The SSL will collaborate with Systems and Software Architects while managing the security compliance for the programs.

Candidate must have a Bachelor's in STEM and 8 years' experience in software security. Knowledge of secure coding practices and the ability to obtain a DoD Secret clearance is essential. Competitive salary and benefits included.

Qualifications

• 8 years of related experience in software security.
• Ability to obtain and maintain U.S. security clearance.
• Experience with agile and DevSecOps environments.

Responsibilities

• Act as the Technical Lead and Agile Product Owner for the Software Security Team.
• Ensure compliance with System Security requirements.
• Implement secure coding standards for each programming language.

Skills

Object-oriented software design

Embedded development using C/C++

Embedded software security

Cryptographic algorithms

Secure Boot concepts

Understanding of secure coding principles

Education

Bachelor’s degree in Science, Technology, Engineering or Mathematics (STEM)

Tools

Xilinx UltraScale+ MPSoC

Embedded Linux

VxWorks

Python

Perl

Job description

Position Details

Location: 1151 E Hermans Rd, Tucson, AZ 801 (External Site)

Position type: Onsite. Eligibility: U.S. citizenship required. Security clearance: DoD Secret (intermediate clearance required before start date).

Job Summary

The Software Security Sensors and Effectors Department within the Software Product Assurance (SPA) Center is looking for a highly motivated individual to fill a Software Security Lead (SSL) position in Tucson, AZ. The SSL will work with Systems and Software Architects and program stakeholders to embed software security in the program’s processes and deliverables. Join us and help shape the future of aerospace and defense.

Responsibilities

• Act as the Technical Lead and potentially the Agile Product Owner for the Software Security Team.
• Own the software security implementation to ensure compliance with System Security requirements.
• Adopt and implement secure coding standards for each programming language used.
• Drive off‑nominal testing by ensuring the software remains in a secure state during failure conditions and by developing negative test cases for bypassing security.
• Use compiler, interpreter, and build tool features that improve executable security and prevent the compiler from optimizing out any security‑critical behaviors.
• Provide the software assurance implementation for the Program Protection Implementation Plan (PPIP) along with a software vulnerability risk assessment on reused code and a Software Bill of Materials for the final delivery.
• Collaborate with the Systems Security Lead and stakeholders to capture and develop security‑relevant requirements.

Qualifications (Must Have)

• Bachelor’s degree in Science, Technology, Engineering or Mathematics (STEM) and 8 years of related experience.
• Experience in object‑oriented software design and embedded development using languages such as C and/or C++.
• Experience with Xilinx UltraScale+ MPSoC, Versal, or similar embedded processors.
• Experience with embedded OS like VxWorks, Embedded Linux, or similar.
• Embedded software security, cryptographic algorithm experience.
• Experience with Secure Boot concepts.
• Understanding of secure coding principles, architecture and implementation of secure coding best practices.
• Ability to obtain and maintain a U.S. security clearance.

Preferred Qualifications

• Experience with validation and verification of software applications.
• Knowledge of Linux/Unix environments, FPGA interfacing, low‑level memory drivers, inter‑processor communication, ARM architecture.
• Experience designing, implementing, testing, or fielding real‑time security‑oriented solutions on Department of Defense (DoD) programs (embedded experience highly preferred).
• Experience using security‑relevant tools and devices for security auditing, network security, host/server security, communication security, or policy management.
• Experience in Agile and DevSecOps environments, including Scrum/Kanban frameworks and development environments.
• Experience with software configuration management and bug tracking tools.
• Experience with Python or Perl.
• Knowledge of modern computer architecture and hardware technologies including PCIe, GPIO, I2C, SATA, Field Programmable Gate Arrays (FPGAs), and Application‑Specific Integrated Circuits (ASICs).

Security Clearance

This position requires an active U.S. government issued security clearance. Applicants must obtain and maintain a DoD Secret clearance and the ability to obtain an interim clearance before the start date. More information about security clearances can be found on the U.S. Department of State government website: https://www.state.gov/m/ds/clearances/c10978.htm

Benefits

Salary range: 107,500 USD – 204,500 USD. Hired applicants may be eligible for benefits, including medical, dental, vision, life and disability insurance, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance programs, and paid time off. Specific benefits depend on the business unit and collective‑bargaining agreements.

Equal Opportunity Employer

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action for qualified individuals with a disability and protected veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.