Principal System Security Engineer - P4

The Principal System Security Engineer (P4) role supports Raytheon’s Systems Security Engineering team in building holistic security solutions for National Security Systems, with the objective of protecting the Warfighter’s technology advantage. This is an onsite position in Woburn, MA and requires U.S. citizenship along with a DoD Secret clearance (Ability to obtain INTERIM prior to start).

Responsibilities

• Work with customers to define SSE requirements, architecture, solutions, trade studies, and vendor product analysis, including costs, implementation approach, system impacts, and effectiveness
• Develop, design, integrate, test, and maintain cybersecurity capabilities for National Security Systems
• Ensure compliance with National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) controls
• Create top-level system requirements and flow down requirements and implementation concepts to subsystem level
• Produce plans and estimates, support task execution, track project progress, report status, and develop risk identification and mitigation plans
• Advise and assist program management on SSE architecture and technical issues, and deliver technical briefings to leadership
• Define security development and test efforts, implement security controls for networking devices, databases, operating systems, and hardware and software components, and maintain associated technical documentation
• Integrate cybersecurity development activities and support test and integration efforts
• Support bid and proposal development

Required Qualifications

• Typically requires a Bachelor’s Degree in Science, Technology, Engineering, or Mathematics (STEM) and 8 years of prior relevant experience
• Ability to obtain and maintain a U.S. government issued security clearance is required; U.S. citizenship is required for eligibility
• Experience in System Security Engineering and/or Cybersecurity Engineering and/or System Administration or IT/Network Administration
• Experience with NIST Risk Management Framework (RMF)

Preferred Qualifications

• Active and transferable U.S. government issued Secret security clearance
• Managerial or leadership experience
• Hands-on experience with cybersecurity tools and products, including anti-virus and host-based or endpoint security solutions such as HIDS/HIPS, Multi-Factor Authentication (MFA), and SIEM, plus centralized auditing tools (for example Splunk, IBM QRadar, Elasticsearch)
• Linux Bash scripting or Python scripting experience, comfort using the Linux/Unix command line, and automation and orchestration experience with tools such as Ansible
• Security systems engineering experience across computer hardware and software operating systems and application solutions, including stand-alone, air-gapped environments and LAN/WAN configurations
• Experience with virtualization and containerization technologies, including building and securely configuring virtual machine images, with hypervisors such as VMWare, OpenShift, and V-Sphere
• DoDI 8570.01-M IAT Level-II compliant certification (for example Security+, CISSP, CEH, or equivalent)
• Security features and/or vulnerability analysis experience across operating systems as defined by DoD or Intelligence agencies, including research into vulnerabilities and cybersecurity threats, and experience with Tenable Nessus vulnerability scanning
• Experience with IT and/or network and system security administration, including operating system security configuration, hardening and patching, and account management best practices for UNIX, Microsoft Windows/Server, and Red Hat Enterprise Linux; experience with DISA STIG hardening is a plus
• Experience securely configuring networking devices (switches, routers, firewalls) and software-defined networking or storage devices; DISA STIG hardening experience is a plus
• Understanding of Systems Engineering requirements and DoD Authorization and Accreditation processes, experience implementing RMF controls, and developing and maintaining certification and accreditation documentation to support Authority to Operate (ATO)
• Familiarity with Program Protection Plan (PPP) requirements (DoDI 5000.02 and DoDI 5200.39) and understanding of maintaining compliance with DoD technology release and export licensing policies
• General understanding of secure architectures, Systems Engineering development lifecycle, and Agile software development methodologies and principles
• Experience with technical documentation and technical writing
• Prior defense industry experience working on classified U.S. Government information systems is a plus

Technologies

• NIST Risk Management Framework (RMF)
• Linux Bash scripting
• Python scripting
• Ansible
• Splunk
• IBM QRadar
• Elasticsearch
• HIDS/HIPS
• Multi-Factor Authentication (MFA)
• SIEM
• Tenable Nessus
• VMWare
• OpenShift
• V-Sphere
• DISA Security Technical Implementation Guide (STIG)

Location

Woburn, MA 01801 (onsite)

Compensation

USD 118,300 - 224,900 per yearly

Security Clearance Requirements

• U.S. citizenship is required
• Active and transferable U.S. government issued security clearance is required prior to the start date
• DoD Clearance: Secret
• Security Clearance Status: Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date

Benefits

• Relocation eligible, with relocation assistance available
• Medical, dental, and vision insurance; life insurance
• Short-term disability and long-term disability
• 401(k) match
• Flexible spending accounts
• Flexible work schedules
• Employee assistance program
• Employee Scholar Program
• Parental leave
• Paid time off
• Holidays
• Annual short-term and/or long-term incentive compensation programs (depending on level and collective-bargaining agreement coverage)

Education

Bachelor’s Degree in Science, Technology, Engineering or Mathematics (STEM)