Senior Principal Systems Engineer Product Security

Job Description

Join Our Team of Systems Engineering Experts!

We're seeking talented Sr. Principal Systems Engineer with Product Security expertise to join our team at our Endicott, NY location. As a Sr. Principal Systems Engineer, you'll have the opportunity to work on cutting-edge projects that shape the future of avionics and electronic controls.

About Our Business Areas:

Our Controls & Avionics Solutions (CAS) business is at the forefront of avionics innovation, developing next-generation fly-by-wire flight controls, full authority digital engine controls, and power management systems.

Our Power & Propulsion Solutions (PPS) business is revolutionizing the way we think about power management, developing eco-friendly, hybrid, and electric systems that keep our air cleaner.

Your Role:

As a Sr. Principal Systems Engineer in our organization, you will be responsible for ensuring successful technical execution of development and providing critical input to Systems Engineering discipline processes in support of Controls and Avionics Solutions. You will also work closely with cross-functional teams to ensure the security of our products and systems.

You will make impacts as a Systems Engineer in the following ways;

• Prepare and/or review documentation for system designs and architectures in accordance with established systems development processes and procedures.

• Verify and validate moderately complex aspects of systems designs to ensure conformance with functional specifications and customer requirements.

• Architect product security features into real-time safety critical embedded control systems.

• Decomposing customer product security requirements into feature-set capability requirements allocated to hardware, programmable logic devices, software and supporting engineering groups.

• Participate in threat/vulnerability assessments applying designated guidelines to identify required security measures to mitigate the security risks.

• Perform system/product integration.

What We Offer:

• A dynamic and collaborative work environment

• Opportunities to work on cutting-edge projects that shape the future of avionics and electronic controls

• Professional development opportunities to help you grow your skills and career

• A competitive salary and benefits package

• A hybrid work environment where you will balance your time working on site and remote

• A 9/80 - work schedule (every other Friday off)

Required Education, Experience, & Skills

• Bachelors degree in related engineering field.

• 8 years of experience in avionics or electronic embedded controls development.

• Experience leading the architecture, design, and integration of electronic control systems which include hardware, software and programmable logic devices.

• Experience in full lifecycle including requirements, design, integration, validation, and verification.

• Experience performing threat assessments on embedded controls.

• Technical writing skills: capable of creating required engineering documentation.

Preferred Education, Experience, & Skills

• Master's Degree in a related engineering field

• 10 years of experience in avionics or electronic embedded controls development, including familiarity with systems such as flight controls, engine controls, or mission systems

• Experience defining requirements for product security features leveraging component level cyber security features including, secure boot, Trusted Execution Environments, cryptographic accelerators, Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs).

• Experience translating cybersecurity concepts including; confidentiality, integrity, availability, authentication and authorization into functional product security requirements for the system being developed.

• Experience applying any of the following security processes; DoD Risk Management Framework (RMF), DO-326A Airworthiness Security Process Specification or ISO-21434 Road Vehicle Security.

• 2 years of experience using MBSE/SYSML tools such as MagicDraw/Cameo

• Understanding of cryptographic objects, algorithms, and protocols

• Experience with DISA STIGs and/or IAVA compliance hardening

• Experience with safety critical development guidelines including; ARP4754, DO-178B/C, DO-254, ISO-26262 or equivalent safety process requirements.

• Understanding of offensive security principles.

• Experience with DISA STIGs and/or IAVA compliance hardening

• Experience with MITRE s CVEs, CWEs, CAPEC and ATT&CK.

• Understanding of purpose and usage of; cryptographic objects: Keys, Certs, CRLs; algorithms: SHA, AES, RSA, ECC, HMAC, GMAC, etc., and protocols: TLS/DTLS, IPSec, etc.

• Experience performing security testing on embedded control including; scanning or fuzzing or pen-testing using industry standard tools.

• Team player with a proactive attitude and the ability to be productive in a dynamic/collaborative environment

• Demonstrated experience providing technical leadership

• Motivated self-starter with good problem-solving skills, judgment, and analytical capability

Pay Information

Full-Time Salary Range: $ - $

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20 hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

Senior Principal Systems Engineer Product Security

BR

EEO Career Site Equal Opportunity Employer. Minorities . females . veterans . individuals with disabilities . sexual orientation . gender identity . gender expression