Sr Principal Cybersecurity Engineer, FOSS Governance and Risk Management

Location: US-FL-REMOTE

 Position Role Type: Remote

 U.S. Citizen, U.S. Person, or Immigration Status Requirements: The ability to obtain and maintain a U.S. government issued security clearance is required.​ U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

 Security Clearance Type: DoD Clearance: Secret

 Security Clearance Status: Active and existing security clearance required after day 1 At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world.  Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. We deliver solutions that help our nation and allies defend freedoms and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense. The RTX Product Cybersecurity Center (PCsC) is a leader in securing RTX products, enabling resilience, trust, and compliance throughout the product lifecycle. We foster a cyber aware engineering culture by integrating security controls, modern tooling, and supply chain integrity practices into every aspect of development. Through collaboration, automation, and proactive risk management, we strengthen the foundation that protects RTX customers, partners, and mission critical aerospace and defense systems from evolving global threats. As part of the PCsC, the FOSS Governance and Risk Management function provides enterprise level cybersecurity oversight for Free and Open Source Software (FOSS). This organization ensures that every open-source component used across RTX engineering and digital technology workflows is governed by robust security policies, monitored for vulnerabilities, and supported by well defined incident response processes. These capabilities improve software supply chain resilience, reduce enterprise risk exposure, and ensure compliance with emerging regulations related to FOSS usage, traceability, and secure lifecycle management. There is an exciting opportunity for a Sr Principal Cybersecurity Engineer (P5) specializing in FOSS governance, vulnerability management, and incident response. This role is highly visible and will define enterprise processes, influence cybersecurity governance direction, and enable scalable, compliant, and secure FOSS usage across RTX. The Sr Principal Engineer will partner closely with Cyber Engineering, FOSS ecosystem teams, legal, supply chain, program engineering, DT platform owners, and senior leadership to establish end to end governance that meets regulatory, business, and security requirements in a rapidly evolving threat landscape. This is a full‑time remote position.

Define and maintain enterprise FOSS cybersecurity governance (policies, standards, lifecycle controls, decision frameworks). Establish FOSS vulnerability management requirements (ingestion, approved use, patching, ratings, escalation). Design and operationalize the enterprise process for identifying, triaging, and remediating FOSS vulnerabilities, aligned to RTX cyber risk management practices and industry guidance (NIST SSDF, SLSA, EO 14028, etc.). Develop and maintain a FOSS cybersecurity incident response model, enabling consistent enterprise coordination, rapid threat assessment, containment actions, and communication workflows. Ensure governance controls seamlessly integrate with ingestion pipelines, scanning workflows, SBOM generation, and