Associate or Experienced Product Security Engineer

Boeing•Everett, WA

About The Position

Associate or Experienced Product Security Engineer Company: The Boeing Company Boeing Commercial Airplanes is seeking an Associate (Level 2) or Experienced (Level 3) Product Security Engineer to join our Cybersecurity Innovation team in Everett, WA. This position is responsible for ensuring security, safety, and resiliency of all digitally-connected, in-service BCA airplanes with the development and support of system developments, methods, and tools. As such, this position offers a great career opportunity for someone wanting to grow their skills and/or enter the exciting and growing area of cybersecurity.

Requirements

Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
Level 2: 2+ years of related work experience or an equivalent combination of education and experience
Level 3: 5+ years of related work experience or an equivalent combination of education and experience
This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Nice To Haves

Working knowledge in systems, engineering, systems integration, airplane systems, and/or airplane certification
Bachelor of Science degree from an accredited course of study, where the Accreditation Board for Engineering and Technology (ABET) is the preferred accreditation standard
Experience in cybersecurity, security network architecture, embedded systems security, security testing and evaluation, network design, cyber physical systems or PKI infrastructure.
Experience planning and executing penetration tests in one of more of the following domains: Windows and Linux Operating Systems and IP-based networks Web applications Avionics, embedded systems, non-standard ethernet protocols (ARINC, etc.) Hardware
Experience with hardware and firmware security
Experience coordinating and presenting technical content to a large audience
Possess one or more security certifications, including but not limited to: CISSP; Security+; CEH; CCNA; UNIX/LINUX System Administration; GIAC GPEN, GWAPT, or GXPN; Offensive Security Certified Engineer (OSCE); Offensive Security Certified Professional (OSCP)

Responsibilities

Assesses risks, threats, and vulnerabilities of the product assets and production systems in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance.
Develops and coordinates system security requirements with different system stakeholders.
Provides technical data and develops documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery.
Coordinates with security testers to validate coverage and impacts to analysis.
Coordinates with external customers and internal stakeholders on detection capabilities in alignment with continued airworthiness strategies.
Supports and participates in the development of effective and/or innovative technical solutions with an awareness of consequences of judgements individually and through teams.
Supports the development, implementation, and communication of the sustainment program to ensure continued product security, safety, and resiliency of digitally-connected, in-service airplane models.
Ensures configuration management and security of facilities, equipment, tools, data, networks, and resources used to ensure continued product security and resiliency of in-service models.