Principal Cybersecurity Engineer – Product Owner

Raytheon brings together cybersecurity innovation and product execution to strengthen mission-ready systems. This onsite role in Tewksbury, MA supports Patriot Cyber, combining hands-on testing with roadmap-driven product ownership to help advance secure software, hardware, networks, and integrated capabilities.

As a Principal Cybersecurity Engineer (Product Owner), you will lead an Agile Scrum Team as a product owner while driving security analysis, advanced ethical hacking, and secure development guidance. You will also help update and maintain key authorization artifacts to improve resilience through RMF and ATO-ready documentation.

Responsibilities

• Serve as a Product Owner for one of the Scrum Teams on Patriot Cyber, owning product vision, strategy, and backlog for emerging cybersecurity capabilities.
• Lead cybersecurity work across software, hardware, networks, and integrated system components, aligning technical outcomes to product direction.
• Conduct advanced penetration testing and ethical hacking activities, including scoping, threat modeling, attack surface analysis, exploitation attempts, impact analysis, and hardening recommendations.
• Apply structured approaches such as the Ethical Hacking Phases and Cyber Kill Chain to identify weaknesses and guide secure design improvements.
• Perform vulnerability scanning and assessment, then translate findings into prioritized risks, actionable remediation plans, and updates to the cybersecurity roadmap.
• Drive application security analysis and define secure development requirements for new Patriot software components and modernization initiatives.
• Incorporate inputs from scanning tools, penetration tests, CVA results, RMF changes, and exploitation research into Sprint planning and product decisions.
• Develop, refine, and maintain cybersecurity architecture artifacts, requirements, strategies, design documents, and security policies supporting modernization efforts.
• Support creation and improvement of RMF/ATO documentation including SSP sections, POA&Ms, SAR inputs, PPSM entries, SBOM updates, HW/SW lists, and other CDRLs.
• Partner with engineering, platform owners, and stakeholders to evaluate alternative solutions and ensure secure implementation of system enhancements.
• Collaborate with leadership (CPO and CPTL) to align product priorities, resolve cross-platform dependencies, and influence cybersecurity modernization strategy.
• Independently investigate complex, undefined cyber problems, gather technical data, analyze findings, and recommend system-level improvements.
• Communicate regularly with internal programs, external partners, and cross-discipline stakeholders to guide secure development and influence policies and cybersecurity standards.

Requirements

• Bachelor’s degree in a STEM field and 8+ years of relevant cybersecurity, engineering, or technical product leadership experience.
• Active and transferable U.S. government issued security clearance required prior to start date; U.S. citizenship is required because only U.S. citizens are eligible for a security clearance.
• Advanced expertise in cybersecurity fundamentals, compliance requirements, and RMF (NIST SP 800-37).
• Hands-on experience in vulnerability assessment, ethical hacking phases, kill-chain analysis, and remediation recommendations.
• Experience with NSA (FIPS), NIST (SP 800 series), DISA STIGs, and USCYBERCOM cybersecurity guidance.
• Experience with secure configuration and administration of Windows, RHEL, and common network platforms (e.g., Cisco).
• Proficiency with cybersecurity and vulnerability assessment tools such as Nessus, ACAS, OpenVAS, SCC, SCAP, STIG Viewer, and evaluate-STIG.
• Ability to lead or facilitate Agile teams; familiarity working with Scrum Masters and Scrum Practitioners.
• Ability to define, refine, and communicate technical user stories, acceptance criteria, and backlog items.
• Demonstrated capability to analyze complex cybersecurity test results and threat behavior to drive decisions.

Technologies

• NIST SP 800-37
• NSA (FIPS)
• NIST (SP 800 series)
• DISA STIGs
• USCYBERCOM cybersecurity guidance
• Windows, RHEL, Cisco
• Nessus, ACAS, OpenVAS, SCC, SCAP, STIG Viewer, evaluate-STIG
• Ethical Hacking Phases, Cyber Kill Chain
• RMF/ATO documentation, SSP sections, POA&Ms, SAR inputs, PPSM entries, SBOM updates, HW/SW lists, CDRLs

Benefits

• Medical, dental, vision, life insurance
• Short-term disability, long-term disability
• 401(k) match
• Flexible spending accounts
• Flexible work schedules
• Employee assistance program
• Employee Scholar Program
• Parental leave
• Paid time off
• Holidays
• Annual short-term and/or long-term incentive compensation programs (not guaranteed)

Security Clearance

• DoD Clearance: Secret
• Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date

Additional Qualifications (Preferred)

• Ethical hacking or penetration testing certifications (CEH, OSCP, GPEN, or similar)
• Familiarity with DoDI 8510.01 and A&A/ATO processes within DoD environments
• Experience supporting Army cybersecurity programs, Penetration Testing efforts, Assessment efforts, or Patriot system components
• Experience writing detailed user stories, estimating work, and decomposing features as a Scrum Practitioner
• DoDI 8570.01 Level III certification (IAT/IAM/IASAE) preferred
• Security-related network or operating system certifications (Cisco, Microsoft, Red Hat, etc.)
• Ability to work independently as a self-starter while influencing policies, engineering practices, and cross-team decision-making
• Broad knowledge of project management concepts and multi-platform system integration within RTX/Patriot programs

Role location: Onsite. Employees working in onsite roles will work primarily onsite, including production and maintenance employees essential to product development.

Compensation: USD 107,500 - 204,500 per year.

Note: U.S. citizenship is required as only U.S. citizens are eligible for a security clearance.