Principal System Security Engineer - P4

The Principal System Security Engineer (P4) role supports Raytheon’s Systems Security Engineering team, where you will help develop holistic security solutions for National Security Systems and protect the Warfighter’s technology advantage. This position is onsite in Woburn, MA and requires U.S. citizenship along with the ability to obtain a DoD Secret clearance (INTERIM prior to start).

Key Responsibilities

• Partner with customers to define System Security Engineering (SSE) requirements, architecture, solutions, trade studies, and vendor product analysis, including costs, implementation approach, system impacts, and effectiveness
• Develop, design, integrate, test, and maintain cybersecurity capabilities for National Security Systems
• Support compliance with the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) controls
• Create top-level system requirements and flow down requirements and implementation concepts to subsystem levels
• Produce plans and estimates, track task execution, manage project reporting, and develop risk identification and mitigation planning
• Advise program management on SSE architecture and related issues, and deliver technical briefings to leadership
• Define security development and test efforts for implementation of security controls across networking devices, databases, operating systems, and hardware and software components, including associated technical documentation
• Integrate cybersecurity development activities and support test and integration efforts
• Support the development of bids and proposals

Required Qualifications

• Typically requires a Bachelor’s Degree in Science, Technology, Engineering, or Mathematics (STEM) and 8 years of prior relevant experience
• Ability to obtain and maintain a U.S. government issued security clearance is required; U.S. citizenship is required because only U.S. citizens are eligible for a security clearance
• Experience in System Security Engineering and/or Cybersecurity Engineering and/or System Administration or IT/Network Administration
• Experience with NIST Risk Management Framework (RMF)

Preferred Qualifications

• Active and transferable U.S. government issued Secret security clearance
• Managerial or leadership experience
• Hands-on experience with cybersecurity tools and products, including anti-virus, host-based or endpoint security solutions such as HIDS/HIPS, Multi-Factor Authentication (MFA), and SIEM tools, plus centralized auditing tools (Splunk, IBM QRadar, Elasticsearch)
• Linux Bash scripting or Python scripting experience, comfort using Linux/Unix command line tools, and experience with automation or orchestration tools such as Ansible
• Security systems engineering experience across varied computer hardware and software operating systems and application solutions, including both stand-alone air-gapped environments and LAN/WAN configurations
• Experience with virtualization and containerization technologies, including building and securely configuring virtual machine images; familiarity with VMWare, OpenShift, and V-Sphere
• DoDI 8570.01-M IAT Level-II Compliant certification (for example, Security+, CISSP, CEH, or equivalent)
• Experience with security features and/or vulnerability analysis for operating systems defined by DoD or Intelligence agencies, including vulnerability research and cybersecurity threat research; experience with Tenable Nessus vulnerability scanning
• Experience administering IT and/or network and systems security, including operating system security configuration, hardening and patching, and account management practices for UNIX, Microsoft Windows/Server, and Red Hat Enterprise Linux; DISA STIG hardening experience is a plus
• Experience securely configuring networking devices and software-defined networking or storage devices; DISA STIG hardening experience is a plus
• Understanding of Systems Engineering requirements and specifications, implementation of DoD and Authorization and Accreditation Processes, RMF controls, and development and maintenance of certification and accreditation documentation to maintain Authority to Operate (ATO)
• Familiarity with Program Protection Plan (PPP) requirements under DoDI 5000.02 and DoDI 5200.39, and understanding maintaining compliance with DoD technology release and export licensing policies
• General understanding of secure architectures, Systems Engineering development lifecycle, and Agile software development methodologies
• Experience with technical documentation and technical writing
• Prior defense industry experience working with classified U.S. Government information systems is a plus

Technologies and Tools

• NIST Risk Management Framework (RMF)
• Linux Bash scripting
• Python scripting
• Ansible
• Splunk
• IBM QRadar
• Elasticsearch
• HIDS/HIPS
• Multi-Factor Authentication (MFA)
• SIEM
• Tenable Nessus
• VMWare
• OpenShift
• V-Sphere
• DISA Security Technical Implementation Guide (STIG)

Location

Onsite: Woburn, MA 01801

Compensation

Salary Range: USD 118,300 to 224,900 per year

Education

Bachelor’s Degree in Science, Technology, Engineering or Mathematics (STEM)

Security Clearance Requirements

• Security clearance type: DoD Clearance: Secret
• Security clearance status: Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date
• U.S. citizenship requirement: U.S. citizenship is required because only U.S. citizens are eligible for a security clearance

Benefits

• Relocation Eligible (relocation assistance available)
• Medical, dental, vision, life insurance
• Short-term disability, long-term disability
• 401(k) match
• Flexible spending accounts
• Flexible work schedules
• Employee assistance program
• Employee Scholar Program
• Parental leave
• Paid time off
• Holidays
• Annual short-term and/or long-term incentive compensation programs (depending on level and collective-bargaining agreement coverage)