Senior Principal Cybersecurity Engineer - Avionics (ONSITE)

Date Posted:

2025-02-07

Country:

United States of America

Location:

HIA32: Cedar Rapids, IA 400 Collins Rd NE , Cedar Rapids, IA, 52498-0505 USA

Position Role Type:

Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Security Clearance:

Classified

The Product Cybersecurity Engineering team is recruiting a P5 Senior Principal Cybersecurity Engineer interested in leading all phases of the Secure System Development Life Cycle. Our team supports the development of products throughout the company wherever the customer has security requirements, or the system is exposed to cyber threats by its connectivity or operational use.  Our team works on many aspects of embedded product cybersecurity including security control trades, concept of operations, pursuit, requirements development, secure architecture and design, secure code development, security testing, certification support and post-entry into service support within the Avionics Strategic Business Unit.  The candidate will be expected to have fluency in the latest security technologies and trends and be able to apply them to embedded systems to enhance the security posture of our products.  This role will involve identifying the cyber threats and associated risks to new and existing products, influencing the architectural design to minimize the identified risks, ensuring proper security implementation details during product development and focusing testing strategies to verify mitigation of perceived risks.

This is an onsite position based in Cedar Rapids, Iowa. Relocation assistance may be available.

What you will do:

• Fostering organizational adoption of Secure System Development Lifecycle (SSDLC)
• Guiding adherence to RMS as well as DO-326A/DO-356A Airworthiness Security process
• Advising Value Stream Leaders for inclusion of security technologies in strategic product roadmaps
• Development and integration support for advancement of Collins developed security technologies
• Evaluating/contributing to technical proposals
• Facilitate advancement of product Public Key Infrastructure (PKI) solutions to address certificate needs
• Participate in cybersecurity focused industry committees and working groups and conveying updates to the organization
• You will use your excellent communications skills to communicate technical issues and status in both written and oral form. 
• You must be adaptable to change, determined to accomplish tasks based on program schedule, collaborate with teammates to learn and make good decisions, enjoy learning new technologies, and contribute to a positive work environment. 

Education & Experience you MUST have:

• Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 10 years prior relevant experience or an Advanced Degree in a related field and minimum 7 years of experience or in absence of a degree, 14 years of relevant experience
• The ability to obtain and maintain a U.S. government issued security clearance is required
• U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

Qualifications you MUST have:

• Experience with systems and software engineering principles focused on embedded avionics products
• Aerospace industry experienceis required
• Knowledge in product security or secure system design; including threat modeling or fuzzing/pen testing  
• Demonstratable networking knowledge (OSI Layers, protocols, etc.) 
• Demonstratable embedded software engineering knowledge

Qualifications we prefer:

• Experience collaborating with program architects to influence inclusion of new security technologies
• Promoting/guiding architectural solutions with a defense-in-depth design
• Reviewing system and application vulnerability assessments and providing mitigations
• Experience creating/reviewing project bids and pursuits
• Familiar w/ secure software delivery and secure boot solutions
• Demonstrable ability to mentor and train junior security engineers
• Analysis experience of SELinux policies for proper process isolation/separation
• Experience with RTCA DO-326A / DO-356A
• Any industry recognized security certifications (Sec+, OSCP, CISSP) are desirable
• Having an active clearance is preferred, but not required

Collins Aerospace, an RTX company, is a leader in technologically advanced and intelligent solutions for the global aerospace and defense industry. Collins Aerospace has the capabilities, comprehensive portfolio, and expertise to solve custo