Senior Systems Security Engineer - P3

Build end-to-end security for National Security Systems as part of Raytheon’s Systems Security Engineering (SSE) team. This onsite role in Woburn, MA focuses on designing and sustaining holistic security solutions, supporting compliance through the NIST Risk Management Framework (RMF), and helping program stakeholders make informed architecture and implementation decisions. U.S. citizenship and DoD Secret clearance requirements apply.

Salary: USD 95,500 - 181,700 per year. Experience: typically 5+ years. Education: Bachelor’s degree in Science, Technology, Engineering or Mathematics (STEM).

Responsibilities

• Collaborate with customers to define SSE requirements, system architecture, security solutions, and trade studies, including vendor product analysis, costs, implementation approach, system impacts, and effectiveness.
• Develop, design, integrate, test, and maintain cybersecurity capabilities for National Security Systems.
• Ensure compliance with NIST RMF controls.
• Create top-level system requirements and flow down requirements and implementation concepts to subsystem teams.
• Produce plans and estimates, execute tasks, track project progress, and support risk identification and mitigation planning.
• Advise program management on SSE architecture, help resolve technical issues, and deliver technical briefings to leadership.
• Define security development and test efforts, implement security controls across networking devices, databases, operating systems, and hardware/software components, and provide associated technical documentation.
• Integrate cybersecurity development activities and support test and integration efforts.
• Support development of bids and proposals.

Requirements

• Typically requires a Bachelor’s Degree in STEM and 5 years of prior relevant experience.
• U.S. citizenship is required since only U.S. citizens are eligible for a security clearance.
• Ability to obtain and maintain a U.S. government issued security clearance is required.
• Experience in System Security Engineering and/or Cybersecurity Engineering and/or System Administration or IT/Network Administration.
• Experience with NIST RMF.

Technologies

• NIST Risk Management Framework (RMF)
• Linux Bash scripting, Python, Ansible
• Splunk, IBM QRadar, Elasticsearch
• HIDS/HIPS, Multi-Factor Authentication (MFA)
• SIEM
• Tenable Nessus

Benefits

• Relocation assistance is available.
• Medical, dental, vision, life insurance.
• Short-term disability, long-term disability.
• 401(k) match.
• Flexible spending accounts.
• Flexible work schedules.
• Employee assistance program.
• Employee Scholar Program.
• Parental leave.
• Paid time off and holidays.
• Annual short-term and/or long-term incentive compensation programs (depending on level and whether covered by a collective-bargaining agreement).

Security Clearance

• DoD Clearance Type: Secret.
• Security Clearance Status: Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date.
• Pre-start requirement: Active and transferable U.S. government issued security clearance is required prior to start date.

Preferred Qualifications

• Active and transferable Secret security clearance.
• Managerial or leadership experience.
• Hands-on experience with cybersecurity tools and products including anti-virus, host-based or endpoint security solutions (including HIDS/HIPS), MFA, and SIEM, plus centralized auditing tools (e.g., Splunk, IBM QRadar, Elasticsearch).
• Linux Bash scripting or Python scripting experience.
• Comfort using command line in Linux/Unix and experience with automation or orchestration tools such as Ansible.
• Security systems engineering across stand-alone, airgapped environments and LAN/WAN configurations.
• Experience with virtualization and containerization, including securely configuring virtual machine images.
• Experience with hypervisors such as VMWare, OpenShift, V-Sphere.
• DoDI 8570.01-M IAT Level-II compliant certification (e.g., Security+, CISSP, CEH, or equivalent).
• Security features and/or vulnerability analysis for operating systems as defined by DoD or Intelligence agencies.
• Experience researching vulnerabilities and/or cybersecurity threats.
• Experience with Tenable Nessus vulnerability scanning tool suite.
• IT/network and system security administration, including operating system security configuration, hardening/patching, and account management best practices for UNIX, Microsoft Windows/Server, and Red Hat Enterprise Linux.
• DISA STIG hardening of operating systems (a plus).
• Experience securely configuring networking devices (switches, routers, firewalls) and software-defined networking or storage devices.
• Understanding Systems Engineering requirements, DoD and Authorization and Accreditation Processes, RMF controls, and developing and maintaining certification and accreditation documentation to maintain Authority to Operate (ATO).
• Familiar with Program Protection Plan (PPP) required by DoDI 5000.02 and DoDI 5200.39.
• Understanding of maintaining compliance with DoD technology release and export licensing policies.
• General understanding of secure architectures, Systems Engineering development lifecycle, and Agile software development methodologies and principles.
• Experience with technical documentation and technical writing.
• Prior experience working in defense industry on classified U.S. Government information systems (a plus).

Work Location

• Onsite role: employees work primarily onsite.