Apply on Employer Site

Rolls-Royce · 17 hours ago

Senior Product Security Engineer

Indianapolis, IN

Full-time

Hybrid

Senior Level

$91K/yr - $136K/yr

5+ years exp

Rolls-Royce is a renowned company at the forefront of innovation, seeking a Senior Product Security Engineer to secure their products against evolving security threats. The role involves contributing to the Secure Cyber Resilient Engineering of products throughout their lifecycle and collaborating with various stakeholders to meet system and program requirements.

AerospaceAutomotiveEnergyIndustrial ManufacturingLogisticsMachinery ManufacturingManufacturing

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Contribute to the Secure Cyber Resilient Engineering (SCRE) of our products, applying technical knowledge and providing technical direction as required throughout the product lifecycle: architecture, requirements, design, build, test, production, operations, and support. Frequently, these activities will be done in a digital environment using Model Based Engineering tools

Contribute to the development, implementation, documentation, and maintenance of policies, procedures, associated guidelines, tools and training

Contribute to the security life cycle activities (concept through release) including regulatory certification/qualification (ie - The Risk Management Framework, ED-202A / DO-326A, Secure By Design, IEC 62443, etc)

Collaborate with government, customers, suppliers, and industry experts to meet system and program requirements

Provide feedback on systems security and resilience good practice and help disseminate the techniques, policies, procedures, and knowledge across the business

Able to work across and communicate with multiple business functions (ie - Software, hardware, maintenance, manufacturing, corporate)

Qualification

Product Security EngineeringCybersecuritySystems EngineeringEmbedded SystemsModel Based EngineeringCommunication

Required

Bachelor's degree in a relevant engineering discipline (Electrical, Software, Controls, Systems, Cybersecurity) with 2+ years of experience, OR

Master's degree in a relevant engineering discipline (Electrical, Software, Controls, Systems, Cybersecurity), OR

JD/PhD OR

In order to be considered for this role, must be a U.S. citizen with the ability to obtain and maintain a US DoD security clearance

Preferred

5+ years of experience working in Product Security Engineering on real-time cyber-physical embedded systems (ie - aviation systems, software defined vehicles, medical devices, weapon systems, etc) OR 10+ years of experience working in a related Engineering role (ie - Systems Engineering, Embedded Computer Engineering, or Embedded Software Engineering, etc)

Experience with Systems Engineering on complex systems and excellent systems thinking aptitude: the ability to understand complex system boundaries, interactions, and interdependencies across multiple abstraction layers throughout the system's entire lifecycle

Experience of embedded systems and the technical skills required to develop, implement, and secure such cyber-physical systems

Experience or interest in cybersecurity and cyber threats (ie - designing secure products, systems, and applications; intrusion detection; digital forensics; system recovery; risk assessment tools and methods; security solutions, policies, standards, and procedures, etc.)

Experience in applying Product Security policies and standards to the engineering of cyber-physical systems such as NIST SP 800-160, DO-326, UK Secure By Design, IEC 62443, the Risk Management Framework (RMF), and DoDI 5000.83

Excellent communications skills: able to influence without authority and describe complex ideas simply and succinctly to non-technical people