Pratt & Whitney is hiring a Sr Principal Cybersecurity Embedded Software Engineer to support embedded control and diagnostic capabilities. This role focuses on cybersecurity engineering for systems and software, aligning work to NIST RMF, advancing secure software development lifecycle (SSDLC) practices, and supporting security assessments for products used in both commercial and military engines.
Location and Work Setup
- Location: East Hartford, CT
- Work mode: Onsite
- Onsite note: Onsite employees will work primarily onsite. For onsite and hybrid roles, commuting to and from the assigned site is the employee’s personal responsibility.
Compensation
- Salary range: USD 132,400 - 251,600 per year
Role Summary
The Sr Principal Cybersecurity Embedded Software Engineer will lead cybersecurity engineering aligned with NIST RMF, embed security into system and software designs, execute SSDLC practices, and support security assessment packages. The position also requires a DoD Secret clearance.
Responsibilities
- Lead cybersecurity engineering activities aligned with NIST RMF, including system categorization, security control selection, implementation, assessment, and continuous monitoring.
- Develop, document, and maintain system security architecture, design artifacts, and cybersecurity engineering documentation.
- Collaborate with software, systems, and program engineering teams to embed security requirements and controls into system and software designs.
- Drive development and execution of secure software development lifecycle (SSDLC) practices.
- Support preparation of security assessment packages, including SSP, SCTM, and POA&M, and interface with internal and external assessors.
- Perform threat modeling, vulnerability analysis, and risk assessments for new and existing systems.
- Champion cybersecurity best practices and mentor junior engineers on secure design principles.
- Contribute to technical reviews, design decisions, and risk mitigation strategies as a senior technical authority.
- Ensure compliance with applicable DoD, NIST, and corporate cybersecurity standards.
Requirements
- Education: Bachelor’s degree in STEM
- Experience: 10 years of engineering experience, or an Advanced Degree, or 7 years’ experience with an advanced degree
- Security clearance: Ability to obtain and maintain a U.S. government issued security clearance is required
- Citizenship: U.S. citizenship required, as only U.S. citizens are eligible for a security clearance
- DoD Clearance: Secret
- Post-day 1 requirement: Active and existing security clearance required after day 1
Benefits
- Relocation Assistance
- Medical
- Dental
- Vision
- Life insurance
- Short-term disability
- Long-term disability
- 401(k) match
- Flexible spending accounts
- Flexible work schedules
- Employee assistance program
- Employee Scholar Program
- Parental leave
- Paid time off
- Holidays
- Annual short-term and/or long-term incentive compensation programs (not guaranteed)
Controls & Diagnostics Systems (CDS)
CDS develops complex, cyber-resilient control systems and software for commercial and military engines, including power and thermal management systems and auxiliary power units. CDS also develops advanced diagnostic and health management systems that monitor products, forecast events, and help facilitate MRO operations. With growing emphasis on sustainability, CDS is working on system development for hybrid and electric propulsion.
Preferred Qualifications
- Advanced degree in computer engineering, software engineering, computer science, or cybersecurity
- DoD, aerospace, or critical infrastructure cybersecurity experience
- Experience with DevSecOps practices, automated security tooling, and CI/CD pipelines
- Familiarity with embedded systems security
- Demonstrated ability to influence across teams and lead complex technical initiatives
- Leadership and strong communication skills