Apply on Employer Site

BAE Systems, Inc. · 2 weeks ago

Senior Principal Systems Engineer – Product Security

Endicott, NY

Full-time

Hybrid

Senior Level, Lead/Staff

$119K/yr - $201K/yr

8+ years exp

BAE Systems, Inc. is an international defense, aerospace and security company dedicated to delivering cutting-edge technology. The Sr. Principal Systems Engineer will be responsible for ensuring successful technical execution of development and providing critical input to Systems Engineering processes, particularly focusing on product security in avionics and electronic controls.

Defense & Space

No H1B

U.S. Citizen Only

Responsibilities

Prepare and/or review documentation for system designs and architectures in accordance with established systems development processes and procedures

Verify and validate moderately complex aspects of systems designs to ensure conformance with functional specifications and customer requirements

Architect product security features into real-time safety critical embedded control systems

Decomposing customer product security requirements into feature-set capability requirements allocated to hardware, programmable logic devices, software and supporting engineering groups

Participate in threat/vulnerability assessments applying designated guidelines to identify required security measures to mitigate the security risks

Perform system/product integration

Qualification

Avionics developmentEmbedded control systemsProduct security architectureThreat assessmentsCybersecurity conceptsMBSE/SYSML toolsSafety critical developmentTechnical writingProactive attitudeTeam playerProblem-solving skillsTechnical leadership

Required

Bachelor‘s degree in related engineering field

8+ years of experience in avionics or electronic embedded controls development

Experience leading the architecture, design, and integration of electronic control systems which include hardware, software and programmable logic devices

Experience in full lifecycle including requirements, design, integration, validation, and verification

Experience performing threat assessments on embedded controls

Technical writing skills: capable of creating required engineering documentation

Preferred

Master's Degree in a related engineering field

10+ years of experience in avionics or electronic embedded controls development, including familiarity with systems such as flight controls, engine controls, or mission systems

Experience defining requirements for product security features leveraging component level cyber security features including, secure boot, Trusted Execution Environments, cryptographic accelerators, Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs)

Experience translating cybersecurity concepts including; confidentiality, integrity, availability, authentication and authorization into functional product security requirements for the system being developed

Experience applying any of the following security processes; DoD Risk Management Framework (RMF), DO-326A Airworthiness Security Process Specification or ISO-21434 Road Vehicle Security

2+ years of experience using MBSE/SYSML tools such as MagicDraw/Cameo

Understanding of cryptographic objects, algorithms, and protocols

Experience with DISA STIGs and/or IAVA compliance hardening

Experience with safety critical development guidelines including; ARP4754, DO-178B/C, DO-254, ISO-26262 or equivalent safety process requirements

Understanding of offensive security principles

Experience with DISA STIGs and/or IAVA compliance hardening

Experience with MITRE's CVEs, CWEs, CAPEC and ATT&CK

Understanding of purpose and usage of; cryptographic objects: Keys, Certs, CRLs; algorithms: SHA, AES, RSA, ECC, HMAC, GMAC, etc., and protocols: TLS/DTLS, IPSec, etc

Experience performing security testing on embedded control including; scanning or fuzzing or pen-testing using industry standard tools

Team player with a proactive attitude and the ability to be productive in a dynamic/collaborative environment

Demonstrated experience providing technical leadership

Motivated self-starter with good problem-solving skills, judgment, and analytical capability