Software Security Lead - Principal Software Engineer - S3E

RTX (Raytheon Technologies) is the worlds largest aerospace and defense company, uniting 185,000 professionals driven by purpose to solve the worlds most complex challenges. With a rich heritage exceeding 100 years, RTX delivers cutting-edge technology and solutions that enable defense and security for the United States and its allies globally. Comprising three market-leading businesses and heavily investing in research and development, the company pushes the boundaries of science to protect and connect the world through innovative aerospace and defense products.

RTX is currently seeking a highly capable Software Security Lead (SSL) to join its Software Security Sensors and Effectors Department in Tucson, Arizona. This onsite role demands a high level of technical skill and security consciousness, as the individual will be deeply involved in embedding software security within program processes and customer deliverables. The SSL will collaborate with Systems and Software Architects, as well as stakeholders, ensuring that all security-relevant software requirements are appropriately captured, developed, and met.

The candidate will act as a technical authority and possibly the Agile Product Owner for the Software Security Team, taking primary ownership of software security implementation to ensure compliance with system security requirements. An emphasis on adopting and implementing secure coding standards across different programming languages is essential. The SSL will also be responsible for driving off-nominal testing scenarios to maintain software integrity during failure conditions, including the development of negative test cases to prevent security bypasses. Moreover, expertise in leveraging compiler, interpreter, and build tool features to maintain security, while ensuring no critical security behavior is compromised by compiler optimizations, is required.

This role extends to software assurance within the Program Protection Implementation Plan (PPIP), entailing vulnerability risk assessments on reused code, producing a comprehensive Software Bill of Materials (SBOM), and applying secure coding principles to develop hardened software applications. Due to the sensitive nature of the work, candidates must have an active or the ability to obtain a U.S. government security clearance (Secret DoD clearance) before starting, making this a strictly onsite position in Tucson.

The ideal candidate will possess a Bachelors degree in Science, Technology, Engineering, or Mathematics (STEM) with at least 8 years of relevant experience. Profound experience in object-oriented software design and embedded development utilizing languages like C and C++, alongside practical exposure to embedded processors such as Xilinx UltraScale+ MPSoC or Versal, is essential. Familiarity with embedded operating systems such as VxWorks or Embedded Linux, and a strong background in software security, cryptographic algorithms, and secure boot concepts, is imperative. Candidates must understand secure coding principles, architecture, and implementation best practices.

Preferred qualifications include experience with software validation and verification, familiarity with Linux/Unix environments, interfacing with FPGAs, low-level memory drivers, inter-processor communication, ARM architecture, and developing security-focused embedded solutions on Department of Defense (DoD) programs. Agile and DevSecOps experience and knowledge of security auditing tools and network/host security devices broaden the candidates capabilities. Additional skills in Python or Perl, software configuration management, bug tracking tools, and knowledge of modern computer architectures, including PCIe, GPIO, I2C, SATA, FPGAs, and ASICs, will be highly advantageous.

RTX values its commitment to creating a safer, more connected world through its core principles of Trust, Respect, Accountability, Collaboration, and Innovation. This position offers an exciting opportunity to shape the future of aerospace and defense within a dynamic, purpose-driven environment. Candidates must be U.S. citizens eligible to obtain and maintain a security clearance to fulfill this role.