Principal Cybersecurity Engineer – Product Owner

Raytheon is seeking a Principal Cybersecurity Engineer to serve as a Product Owner for a Scrum Team on Patriot Cyber. In this onsite role in Tewksbury, MA, you will lead cybersecurity product direction, perform advanced testing activities, and strengthen authorization and compliance artifacts to support Patriot resilience.

Role Overview

As Product Owner, you will own product vision, strategy, and backlog priorities for emerging Patriot cybersecurity capabilities across software, hardware, networks, and integrated system components. You will also integrate technical findings from security tools and assessments into planning decisions, while advancing secure development requirements and cybersecurity architecture artifacts for modernization initiatives.

Responsibilities

• Serve as Product Owner for one of the Scrum Teams on Patriot Cyber.
• Lead product vision, strategy, and backlog ownership for emerging Patriot cybersecurity capabilities across software, hardware, networks, and integrated system components.
• Conduct advanced penetration testing and ethical hacking activities, including scoping, threat modeling, attack surface analysis, exploitation attempts, impact analysis, and system hardening recommendations.
• Apply structured frameworks such as the Ethical Hacking Phases and Cyber Kill Chain to identify weaknesses, assess adversary techniques, and guide secure design improvements.
• Perform vulnerability scanning and assessment activities, then convert results into prioritized risks, actionable remediation plans, and cybersecurity roadmap updates.
• Drive application security analysis and secure development requirements for new Patriot software components and modernization efforts.
• Integrate outputs from scanning tools, penetration tests, CVA results, RMF changes, and exploitation research into Sprint planning and product decisions.
• Develop, refine, and maintain cybersecurity architecture artifacts, requirements, strategies, design documents, and security policies that support modernization.
• Support development and improvement of RMF/ATO documentation, including SSP sections, POA&Ms, SAR inputs, PPSM entries, SBOM updates, HW/SW lists, and other CDRLs.
• Partner with engineering, platform owners, and stakeholders to evaluate alternative solutions and ensure secure implementation of system enhancements.
• Collaborate with leadership (CPO and CPTL) to align product priorities, resolve cross-platform dependencies, and influence cybersecurity modernization strategy.
• Work independently with minimal oversight to investigate complex, undefined cyber problems, gather technical data, perform analysis, and recommend system-level improvements.
• Communicate frequently with internal programs, external partners, and cross-discipline stakeholders to guide secure development and influence cybersecurity policies and standards.

Required Qualifications

• Bachelor’s degree in a STEM field and 8+ years of relevant cybersecurity, engineering, or technical product leadership experience.
• Active and transferable U.S. government issued security clearance required prior to start date; U.S. citizenship required to be eligible for a security clearance.
• Advanced expertise in cybersecurity fundamentals, compliance requirements, and RMF (NIST SP 800-37).
• Hands-on experience performing vulnerability assessment, ethical hacking phases, kill-chain analysis, and remediation recommendations.
• Experience with NSA (FIPS), NIST (SP 800 series), DISA STIGs, and USCYBERCOM cybersecurity guidance.
• Experience with secure configuration and administration of Windows, RHEL, and common network platforms (e.g., Cisco).
• Proficiency with cybersecurity and vulnerability assessment tools, including Nessus, ACAS, OpenVAS, SCC, SCAP, STIG Viewer, and evaluate-STIG.
• Experience leading or facilitating Agile teams with familiarity working with Scrum Masters and Scrum Practitioners.
• Ability to define, refine, and communicate technical user stories, acceptance criteria, and backlog items.
• Demonstrated capability to analyze complex cybersecurity test results, threat behavior, and data to drive decisions.

Preferred Qualifications

• Ethical hacking or penetration testing certifications (CEH, OSCP, GPEN, or similar).
• Familiarity with DoDI 8510.01 and A&A/ATO processes within DoD environments.
• Experience supporting Army cybersecurity programs, penetration testing efforts, assessment efforts, or Patriot system components.
• Experience writing detailed user stories, estimating work, and decomposing features as a Scrum Practitioner.
• DoDI 8570.01 Level III certification (IAT/IAM/IASAE) preferred.
• Security-related network or operating system certifications (Cisco, Microsoft, Red Hat, etc.).
• Ability to work independently as a self-starter while influencing policies, engineering practices, and cross-team decision-making.
• Broad knowledge of project management concepts and multi-platform system integration within RTX/Patriot programs.

Technologies

• NIST SP 800-37
• NSA (FIPS)
• NIST (SP 800 series)
• DISA STIGs
• USCYBERCOM cybersecurity guidance
• Windows
• RHEL
• Cisco
• Nessus
• ACAS
• OpenVAS
• SCC
• SCAP
• STIG Viewer
• evaluate-STIG
• Ethical Hacking Phases
• Cyber Kill Chain
• RMF/ATO documentation (SSP sections, POA&Ms, SAR inputs, PPSM entries)
• SBOM updates
• HW/SW lists
• CDRLs

Compensation

USD 107,500 - 204,500 per year.

Benefits

• Medical, dental, vision, life insurance
• Short-term disability, long-term disability
• 401(k) match
• Flexible spending accounts
• Flexible work schedules
• Employee assistance program
• Employee Scholar Program
• Parental leave
• Paid time off
• Holidays
• Annual short-term and/or long-term incentive compensation programs (not guaranteed)

Security Clearance and Citizenship Requirements

• Active and transferable U.S. government issued security clearance required prior to start date.
• U.S. citizenship required, as only U.S. citizens are eligible for a security clearance.
• Security clearance type: DoD Clearance: Secret.
• Security clearance status: Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date.

Work Location

Onsite in Tewksbury, MA, United States of America.