Senior Cyber Assessment Engineer - Remote

Date Posted:

2024-06-24

Country:

United States of America

Location:

RMA99: RTN Remote, Massachusetts

Position Role Type:

Remote

At Raytheon, the foundation of everything we do is rooted in our values and a higher calling – to help our nation and allies defend freedoms and deter aggression.  We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat.  Our team solves tough, meaningful problems that create a safer, more secure world.

There is an exciting opportunity for a Sr. Cyber Engineer within the RTX Cyber Operations and Development (CODE) Center. The CODE Center works across all RTX Business unit programs and customers to proactively reduce the risks related to cybersecurity to our products and services.   The CODE Center requires an experienced engineer to complement the Cyber Assessments team working in a highly dynamic environment. This technical expert will be a key contributor, executing cyber vulnerability assessments and network penetration tests for RTX products and services. 

The CA engineer executes cyber assessment activities, including penetration testing of mid-to-large scale enterprise environments and the applications hosted on them. Tasks include conducting product testing and analysis and summarizing findings to technical and leadership audiences. The CA engineer will continually improve - focusing on evolving assessment techniques and new assessment tools. This role requires a Secret Clearance with eligibility to obtain Top Secret/SCI if required. This position can be Remote or Hybrid.

What You Will Do:

• Be a subject matter expert in security related software architecture, development, integration, and testing.

• Engage with RTX Business Units (Raytheon, Pratt & Whitney, and Collins Aerospace) engineers and engineering leads in support of cyber testing and assessments.

• Perform penetration testing, application testing, and security assessments at application, system and enterprise level.

• Support development of Rules of Engagement for cyber assessment events, including scoping documents and reports.

• Perform manual penetration tests and validation of vulnerability scan results.

• Develop automation/scripts for replicating vulnerability validation and penetration tests.

• Devise plans and scenarios for various types of penetration tests.

• Documents exploits and results and remediation recommendations in final vulnerability assessment report.

• Maintain certifications and continuing to learn as tooling, techniques and threats evolve.

• Current IAT II (or higher) DoD 8570/Intermediate Vuln Assessment Analyst certification (GSEC, Security+, CISSP, etc.) or ability to obtain one of these certifications within 90 days of hire.

• Travel for engagements at least 25%.

Qualifications You Must Have:

• Typically requires bachelor’s degree in science, technology, engineering or mathematics (STEM) and 5+ years of experience.

• Experience in system security engineering, preferably in a US Government agency environment (e.g., DoD, IC, NASA).

• Experience with network protocols such as TCP/IP stacks, wire-level protocols, routing protocols, or others.

• Experience conducting network assessments or penetration tests on systems and utilizing testing tools such as Kali Linux, Burp Suite, Nmap, Nessus, ACAS

• Active and transferable U.S. government issued Secret security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance."

Qualifications We Prefer:

• Experience with assembly language (x86/64, ARM, PPC, Mips, etc.) and reverse engineering tools (Ghidra, IDA Pro, Binary Ninja, etc.)

• Demonstrated experience with platform and software assessment tools and platforms such as Ghidra, Ida Pro, gdb, Trellix Malware Analysis

• Strong interpersonal and communication skills

• Proactive, comfortable working in a fast-paced, multi-tiered environment while managing multiple simultaneous projects with little supervision.

• Certifications relevant to Pen Testing such as Pentest+, GPEN, OSCP

What We Offer

Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation.

Learn More & Apply Now!

RTX solves so