Raytheon brings together cybersecurity innovation and product execution to strengthen mission-ready systems. This onsite role in Tewksbury, MA supports Patriot Cyber, combining hands-on testing with roadmap-driven product ownership to help advance secure software, hardware, networks, and integrated capabilities.
As a Principal Cybersecurity Engineer (Product Owner), you will lead an Agile Scrum Team as a product owner while driving security analysis, advanced ethical hacking, and secure development guidance. You will also help update and maintain key authorization artifacts to improve resilience through RMF and ATO-ready documentation.
Responsibilities
- Serve as a Product Owner for one of the Scrum Teams on Patriot Cyber, owning product vision, strategy, and backlog for emerging cybersecurity capabilities.
- Lead cybersecurity work across software, hardware, networks, and integrated system components, aligning technical outcomes to product direction.
- Conduct advanced penetration testing and ethical hacking activities, including scoping, threat modeling, attack surface analysis, exploitation attempts, impact analysis, and hardening recommendations.
- Apply structured approaches such as the Ethical Hacking Phases and Cyber Kill Chain to identify weaknesses and guide secure design improvements.
- Perform vulnerability scanning and assessment, then translate findings into prioritized risks, actionable remediation plans, and updates to the cybersecurity roadmap.
- Drive application security analysis and define secure development requirements for new Patriot software components and modernization initiatives.
- Incorporate inputs from scanning tools, penetration tests, CVA results, RMF changes, and exploitation research into Sprint planning and product decisions.
- Develop, refine, and maintain cybersecurity architecture artifacts, requirements, strategies, design documents, and security policies supporting modernization efforts.
- Support creation and improvement of RMF/ATO documentation including SSP sections, POA&Ms, SAR inputs, PPSM entries, SBOM updates, HW/SW lists, and other CDRLs.
- Partner with engineering, platform owners, and stakeholders to evaluate alternative solutions and ensure secure implementation of system enhancements.
- Collaborate with leadership (CPO and CPTL) to align product priorities, resolve cross-platform dependencies, and influence cybersecurity modernization strategy.
- Independently investigate complex, undefined cyber problems, gather technical data, analyze findings, and recommend system-level improvements.
- Communicate regularly with internal programs, external partners, and cross-discipline stakeholders to guide secure development and influence policies and cybersecurity standards.
Requirements
- Bachelor’s degree in a STEM field and 8+ years of relevant cybersecurity, engineering, or technical product leadership experience.
- Active and transferable U.S. government issued security clearance required prior to start date; U.S. citizenship is required because only U.S. citizens are eligible for a security clearance.
- Advanced expertise in cybersecurity fundamentals, compliance requirements, and RMF (NIST SP 800-37).
- Hands-on experience in vulnerability assessment, ethical hacking phases, kill-chain analysis, and remediation recommendations.
- Experience with NSA (FIPS), NIST (SP 800 series), DISA STIGs, and USCYBERCOM cybersecurity guidance.
- Experience with secure configuration and administration of Windows, RHEL, and common network platforms (e.g., Cisco).
- Proficiency with cybersecurity and vulnerability assessment tools such as Nessus, ACAS, OpenVAS, SCC, SCAP, STIG Viewer, and evaluate-STIG.
- Ability to lead or facilitate Agile teams; familiarity working with Scrum Masters and Scrum Practitioners.
- Ability to define, refine, and communicate technical user stories, acceptance criteria, and backlog items.
- Demonstrated capability to analyze complex cybersecurity test results and threat behavior to drive decisions.
Technologies
- NIST SP 800-37
- NSA (FIPS)
- NIST (SP 800 series)
- DISA STIGs
- USCYBERCOM cybersecurity guidance
- Windows, RHEL, Cisco
- Nessus, ACAS, OpenVAS, SCC, SCAP, STIG Viewer, evaluate-STIG
- Ethical Hacking Phases, Cyber Kill Chain
- RMF/ATO documentation, SSP sections, POA&Ms, SAR inputs, PPSM entries, SBOM updates, HW/SW lists, CDRLs
Benefits
- Medical, dental, vision, life insurance
- Short-term disability, long-term disability
- 401(k) match
- Flexible spending accounts
- Flexible work schedules
- Employee assistance program
- Employee Scholar Program
- Parental leave
- Paid time off
- Holidays
- Annual short-term and/or long-term incentive compensation programs (not guaranteed)
Security Clearance
- DoD Clearance: Secret
- Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date
Additional Qualifications (Preferred)
- Ethical hacking or penetration testing certifications (CEH, OSCP, GPEN, or similar)
- Familiarity with DoDI 8510.01 and A&A/ATO processes within DoD environments
- Experience supporting Army cybersecurity programs, Penetration Testing efforts, Assessment efforts, or Patriot system components
- Experience writing detailed user stories, estimating work, and decomposing features as a Scrum Practitioner
- DoDI 8570.01 Level III certification (IAT/IAM/IASAE) preferred
- Security-related network or operating system certifications (Cisco, Microsoft, Red Hat, etc.)
- Ability to work independently as a self-starter while influencing policies, engineering practices, and cross-team decision-making
- Broad knowledge of project management concepts and multi-platform system integration within RTX/Patriot programs
Role location: Onsite. Employees working in onsite roles will work primarily onsite, including production and maintenance employees essential to product development.
Compensation: USD 107,500 - 204,500 per year.
Note: U.S. citizenship is required as only U.S. citizens are eligible for a security clearance.
