Software Security Lead - Principal Software Engineer - S3E

RTX, formerly known as Raytheon Technologies, stands as the world's largest aerospace and defense company, employing over 185,000 talented professionals united by a shared purpose to address and solve some of the most complex challenges facing the world today. With a heritage built on more than 100 years of experience and cutting-edge engineering expertise, RTX integrates three market-leading business segments to provide unmatched capabilities and opportunities. The company is dedicated to pushing the boundaries of science, fostering innovation, and ensuring the protection and connectivity of the world through advanced aerospace and defense technologies.

RTX is committed to delivering solutions that enable the United States and allied nations to defend their freedoms and deter aggression, thereby contributing to a safer and more secure global environment. The organization's steadfast values—trust, respect, accountability, collaboration, and innovation—shape its culture and drive its mission to develop technologies that impact millions worldwide.

The role of Software Security Lead (SSL) within RTX's Software Security Sensors and Effectors Department, part of the Software Product Assurance (SPA) Center, is a critical and highly specialized position based in Tucson, Arizona. This is an onsite role that requires the candidate to have an active and transferable U.S. government-issued security clearance due to the sensitive nature of the work.

The SSL will work closely with Systems and Software Architects as well as program stakeholders to ensure that robust software security measures are embedded throughout the program's lifecycle, from requirements gathering to delivery. The lead will be responsible for capturing and developing security-relevant software requirements, assessing their impact on the architecture and design, and ensuring compliance with secure coding standards and Software Product Assurance Command Media.

Key responsibilities include acting as the Technical Lead and possibly the Agile Product Owner for the Software Security Team, owning the implementation of software security to meet system security requirements, driving secure coding practices across diverse programming languages, and overseeing off-nominal testing to ensure the software maintains security even during failure conditions. The SSL will also explore the use of compiler features and build tools that enhance executable security and ensure security-critical behaviors are preserved.

Additionally, the SSL, in partnership with the Systems Security Lead, will be accountable for the software assurance implementation outlined in the Program Protection Implementation Plan (PPIP). This includes conducting software vulnerability risk assessments on reused and final-delivered code, and managing the Software Bill of Materials (SBOM) associated with final software deliveries.

Candidates ideal for this position will possess a strong background in secure software design and development, especially in applying secure coding principles to create hardened software applications. The role demands experience in object-oriented design and embedded development, familiarity with embedded operating systems like VxWorks or Embedded Linux, and practical knowledge of encryption and cryptographic algorithms.

Due to the nature of the defense contracts and security clearance requirements, this position requires the candidate to be a U.S. citizen eligible to obtain and maintain an active DoD Secret security clearance. This role offers a unique opportunity to contribute to national security by developing secure software solutions within a leading aerospace and defense organization renowned for technological excellence and innovation.