Cyber Security Engineer

Are you passionate about technology or aviation? Come invent the solutions of tomorrow in the aerospace and defense industry, with an international group where innovation, teamwork and continuing, daily education are fundamental values. Join us!• Your Career: Safran is committed to providing internal mobility to our employees. We operate globally so the sky is the limit of where your Safran journey can take you.• Your Development: Safran employees have free access to Safran University courses and external tuition reimbursement for approved programs or certifications.• Your Benefits: Our suite of comprehensive benefits include health care (medical, dental and vision), life insurance, 401(k) savings plans with company match, paid time off, and more!Safran Cabin headquarters are in Huntington Beach, California, with a global presence of over 10,000 employees at 39 sites. Site locations are in the United States, Mexico, Brazil, Canada, Germany, France, Czech Republic, the Netherlands, Tunisia and Thailand. Safran Cabin serves over 400 airlines and leasing companies globally and delivers to all airframe OEM manufacturers with a heritage spanning over 80 years in the industry.Safran’s Corporate Social Responsibility (CSR) goes beyond our facility walls. We value and support the communities where we live and work. One of Safran’s values and CSR pillar is Corporate Citizenship that helps drive economic, social and cultural progress by sharing our gifts with those around us. We actively contribute to social inclusion and equal opportunity by integrating underserved communities and promoting diversity throughout our companies.Design of products with high performance and rich user experience is a key function in the innovation of connected product solutions development at Safran Cabin Innovation Research & Technology (R&T) group. The Cybersecurity Engineer is responsible for the design, development, verification and coordination of secure hardware, firmware, and communication architectures in embedded systems for connected cabin products.The Cybersecurity Engineer guides the design and development lifecycle for an embedded hardware/software cyber security stack that will provide the communications between Cabin products and aircraft systems. During the development process, this individual will be responsible for leading security risk assessments of embedded hardware and software to identify vulnerabilities and make iterative improvements to the embedded platform’s security architecture. The Cybersecurity Engineer will develop embedded software that meets the highest cybersecurity standards, is highly motivated and passionate about security technologies.Complementary Description1. Develop embedded software that meets the highest cyber security standards. Develop embedded protection systems written primarily in C/C++. Develop cryptographic architectures to facilitate secure system boot, communications and processing. Assist with definition of system design for software requirements, hardware functional interfaces, bus loading, and communication features. Assist with development and integration of Software Assurance measures and practice.2. Design and implement security architectures and features for embedded hardware, software, and communications systems.3. Perform security risk assessments, security scope definition, security architecture design, code audits and design reviews of embedded platforms throughout the secure development lifecycle4. Collaborate with product and engineering teams on security during design/development/testing5. Research and develop technical solutions to mitigate security risks6. Conduct research to identify new attack vectors against embedded products and services7. Develop Threat Models using industry best practices8. Develop embedded software security solutions using RTCA/DO-326A, 356A standards9. Assist the global teams with the development, design and implementation of software-based architectures to support product anti-tamper and/or Cybersecurity requirements.10. Perform all other duties as assigned.Job RequirementsEducation:• Bachelor’s Degree in Computer Engineering/Electrical/Science/MathExperience:• A minimum of 5 years of professional experience in embedded software programming using C/C++ focused in security protocols• Cyber Security Certified or willing to obtain certification in CEH / CISM / CISSP / CompTIA or equivalento Certified Ethical Hacker (CEH) Certificationo Certified Information Security Manager (CISM) certificationo Certified Information Systems Security Professional (CISSP) certificationo Computing Technology Industry Association (CompTIA) certification• Experience working with cryptographic protocols/libraries including secure boot implementation• Experience in publish-subscribe communications architectures (CoAP/MQTT)• Experience in implementing security protocols for wireless networks (802.11/802.15.4/BLE)• Experience with packet capture and analysis tools (Wireshark), thorough understanding of the HTTP, MQTT, CoAP protocols,• Experience in NIST/NSA-approved cryptographic standards and methods.Knowledge & Skills:People, Process & Analytical Skills• Strong communication skills and interest in a pair programming environment• Demonstrated ability in leadership, excellent communication and organizational skills.• Strong team member who inspires, innovates, and delivers results to add values and make a difference• Critical thinking with open to critique• Analytical thinking with ability to synthesize information and identify salient points• Ability to define problems, understands data, establish facts, and draw valid conclusions• Demonstrates ability to work well in a cross-functional team environment• Detail-oriented, organized and work well independently and as part of a team• User-centric /customer-centric focused, embrace Agile XP practice, and possess a learning mindsetTechnical Skills• Design of security requirements and security controls for networks and embedded platforms• Knowledge of cybersecurity standards and best practices for embedded systems• Hardware and software security architecture design and integration• Secure configuration and implementation of networking and communications protocols• Threat modeling, system-level risk assessments, vulnerability analysis and research• Strong knowledge in routing, switching, firewalls, wireless controllers, and DNS• Strong knowledge of System Security Engineering (SSE) principals and process (e.g. NIST SP 800-161)EEO StatementIt is the policy of Safran to provide equal employment opportunity to all individuals regardless of their race, color, religion, sex, sexual preference, gender identity, pregnancy, age, national origin, disability, military or veteran status, citizenship status, genetics, or any other characteristic protected by applicable federal, state, and local laws.

Related Post

BaristaBarista

Coffee Memes Silver Lake is looking to expand its footprint in Silver Lake, Los Angeles. We want coachable and determined individuals to represent our values and vision. Ever seen us