Senior Product Security Engineer

Required Qualifications

• Senior (Level 4) - Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), computer science, engineering data science, mathematics, physics or chemistry (e.g. Bachelor) and typically 9 or more years related work experience or an equivalent combination of technical education and experience or non-US equivalent qualifications. In the USA, ABET accreditation is the preferred, although not required, accreditation standard.
• Experience in the development of avionics computer systems.
• Experience in performing security risk assessments and risk management within networked operational technology (OT)
• Experience in embedded software architecture, agile development, software development lifecycle, software application testing, security tools and practices used in development pipelines
• Demonstrated ability to identify new opportunities and engage with stakeholders to define, plan, resource and deliver solutions.
• Experience with the development of cybersecurity philosophies, patterns, requirements, secure architecture and design’s
• Experience coordinating and presenting technical content to a diverse audience, as well as preparing technical documentation
• Able to work autonomously
• Knowledge of cyber security incident response protocols (identification, impact assessment, containment, remediation, evidence handling, technical reporting, etc.) and safeguarding information.
• Senior (Level 4) - Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), computer science, engineering data science, mathematics, physics or chemistry (e.g. Bachelor) and typically 9 or more years related work experience or an equivalent combination of technical education and experience or non-US equivalent qualifications. In the USA, ABET accreditation is the preferred, although not required, accreditation standard.
• Experience in the development of avionics computer systems.
• Experience in performing security risk assessments and risk management within networked operational technology (OT)
• Experience in embedded software architecture, agile development, software development lifecycle, software application testing, security tools and practices used in development pipelines
• Demonstrated ability to identify new opportunities and engage with stakeholders to define, plan, resource and deliver solutions.
• Experience with the development of cybersecurity philosophies, patterns, requirements, secure architecture and design’s
• Experience coordinating and presenting technical content to a diverse audience, as well as preparing technical documentation
• Able to work autonomously
• Knowledge of cyber security incident response protocols (identification, impact assessment, containment, remediation, evidence handling, technical reporting, etc.) and safeguarding information.
• Experience in product cyber security for avionics systems and component level development
• Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle – to inform requirements, and design
• Experience generating product cyber security artifacts for customer/certifiers
• Security certification is desired (e.g. CISSP); Please state/include on resume
• Experience and applied knowledge of security airworthiness processes and methods applied to avionics systems, such as but not limited to DO-326A and DO-356A
• Experience and/or applied knowledge of complex safety critical systems development process methodologies and associated practices, such as but not limited to DO-178C, DO-254
• Security certification is desired (e.g. CISSP); Please state/include on resume