Senior Principal Engineer, Product Cyber Vulnerability Assessment

This is a fully remote position, open to applicants in Texas.

📋 Description

• The Product Cybersecurity Center (PCsC) offers enterprise-wide services, enablers, training, and technical expertise to assist RTX in securely designing, building, and evaluating the cybersecurity of its products.

• As a senior cybersecurity authority in this organization, the Sr. Principal Engineer, Cyber Vulnerability Assessment spearheads a wide array of product-focused security assessment initiatives, which include vulnerability analysis, penetration testing, secure design evaluation, and architectural review, to uncover risks and enhance the resilience of various RTX products across all lifecycle phases.

• This position involves advanced vulnerability identification, penetration testing, secure design evaluation, architectural analysis, and risk assessment, all aimed at fortifying the cybersecurity posture and resilience of RTX products.

• It necessitates extensive technical expertise, robust analytical abilities, and the capability to provide actionable insights that directly impact product engineering choices.

• A significant aspect of this role involves the creation and delivery of cybersecurity training that empowers product teams to incorporate secure practices into design, development, testing, and maintenance.

• The Sr. Principal Engineer ensures that assessment insights and real-world findings effectively inform course content, hands-on activities, and educational resources utilized across RTX engineering teams.

• Training is not merely an isolated task; it represents a strategic capability that enhances the effectiveness of assessment activities by elevating the overall cybersecurity competence of the product engineering workforce.

• This is an individual contributor position with no direct reports, but it requires functioning as a recognized technical leader.

• The Sr. Principal Engineer will frequently lead assessment teams comprised of engineers and specialists from various sectors of the business, providing technical guidance, mentorship, and coordinating efforts to deliver impactful product assessments.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related technical field.

• Over 10 years of experience in vulnerability assessment, penetration testing, offensive security, product cybersecurity, or comparable hands-on cybersecurity fields.

• Strong expertise in penetration testing and vulnerability analysis tools and methodologies (e.g., Nmap, Burp Suite, Metasploit, OWASP ZAP, Ghidra, IDA Pro, JTAGulator, Bus Pirate, ChipWhisperer).

• Experience in delivering and developing content for a wide audience, including both technical and leadership roles (e.g., teaching, training, conference presentations, customer presentations).

• Professional certifications such as OSCP, OSWE, OSEP, GPEN, GWAPT, GDSA, CISSP, or equivalent.

• The ability to acquire and maintain a U.S. government-issued security clearance is mandatory. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

🏝️ Benefits

• Medical

• Dental

• Vision

• Life insurance

• Short-term disability

• Long-term disability

• 401(k) match

• Flexible spending accounts

• Flexible work schedules

• Employee assistance program

• Employee Scholar Program

• Parental leave

• Paid time off

• Holidays