Asks for

The ad says“(e.g. DO-326A/ED-202A series, ISO 27000, ARINC 811)”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”
The ad says“Working knowledge of at least one of the following security standards/guidelines”
The ad says“Cybersecurity Requirements (DO-326A / DO-355)”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”
The ad says“(e.g. DO-326A/ED-202A series, ISO 27000, ARINC 811)”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”
The ad says“Threat and risk assessment (TARA) for all external interfaces”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”
The ad says“Certificate lifecycle management for ground-to-air TLS sessions”
The ad says“Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems”

The Senior Systems & Security Engineer performs system-level engineering work, in particular for
requirements definition and verification, system and sub-system design and analysis, use case definition, and interface design. The tasks cover all technical activities related to the SATCOM and In-Flight Connectivity (IFC) products of the company. So, deep technical knowledge and a willingness to learn is required, since the person is normally the natural reference, internally and towards external partners (customers and suppliers), for many technical questions. The preparation, maintenance, and control of the company’s technical documentation is also part of the person’s responsibilities.

Responsibilities

Translate customer needs into system, sub-system, and equipment requirements; create and maintain corresponding Use Cases and requirement documents
Perform high-level system and sub-system design, including design and verification of sub-system interfaces
Analyze and verify that designs meet requirements
Participate in creation and presentation of design reviews, internally and with customers
Manage technical projects and work packages, including in R&D projects as required
Mentor junior colleagues on company products and systems-engineering practices
Scout the market for relevant emerging technologies and initiate investigation for potential adoption into company products
Support aircraft and inflight-connectivity system security, including:

Designing and integrating embedded cybersecurity features across wired and wireless systems, on and off the aircraft, with security built in from initial design through deployment and ongoing maintenance
Writing security deliverables and managing OEM-mandated product security documentation to support certification and regulatory (airworthiness) compliance
Defining and applying security assurance processes
Performing threat modeling, vulnerability assessments/tracking, security risk assessments, and penetration testing on software, hardware, and networked aircraft systems
Assisting in system security architecture definition
Leading or supporting incident response (including CSIRT activities), monitoring for intrusions and emerging threats, investigating incidents, and optimizing security tooling
Preparing, planning, and documenting security test cases and scenarios
Responding to customer security-related requests
Collaborating with hardware, software (Android/Linux), and systems engineering teams, translating OEM and industry cybersecurity requirements into actionable engineering tasks

Continuously contribute to process improvement
Perform other job-related duties as assigned

Requirements

Bachelor’s Degree in Engineering or equivalent experience in a related field
6+ years of experience working as Systems Engineer
Working knowledge of at least one of the following security standards/guidelines
(e.g. DO-326A/ED-202A series, ISO 27000, ARINC 811)
Proficiency in threat modeling and secure coding (C/C++ or Golang), with working knowledge of cloud platforms (AWS, Azure) and security tooling such as EDR, SIEM, and vulnerability management systems
Knowledge of penetration testing tools (e.g. Kali Linux, nmap, Burp Suite, vulnerability scanners
(Nessus, OpenVAS)) is advantageous

Cybersecurity Requirements (DO-326A / DO-355)
Threat and risk assessment (TARA) for all external interfaces
Penetration testing per aircraft-level security plan
Intrusion detection on aircraft-side gateways
Certificate lifecycle management for ground-to-air TLS sessions
Logging and auditability of all software load events (your syslog is an example of this in practice)

Benefits

The starting pay range for this position is $112,000 to $127,000 per year however, the base pay offered may vary depending on the level of the position, skills, experience, job-related knowledge, and location.

In addition to a comprehensive package of health benefits that include company contributions, RAVE Aerospace offers a variety of additional benefits and perks to enhance your work-life balance experience including but not limited to:

A home allowance to elevate your home workspace
Discretionary bonus program
Future financial security with a 401(k) program with company match
Paid time off covering vacations, personal time off and sick days, capped off by an exciting year-end holiday shutdown
Embraced flexibility with our alternative work schedule (9/80) to navigate your workweeks with every other Friday off

Asks for

Values