Associate Product Security Engineer

Boeing•Berkeley, MO

3h•Onsite

About The Position

Boeing Global Services (BGS) is seeking an Associate Product Security Engineer to join their Training Systems Product Security Engineering (PSE) team in Berkeley, MO. This role is part of a growing multi-disciplinary cybersecurity engineering organization responsible for cybersecurity compliance and resiliency in delivered products and services. The team supports various programs including P-8A Poseidon, F/A-18 Super Hornets/Growlers, F-15 Eagle, MQ-25 Stingray, T-7A Red Hawk, CH-47 Chinook, and AH-64 Apache. The position offers an opportunity to provide technical support for product cybersecurity and resiliency engineering for embedded systems throughout their lifecycle, including requirements, design, analysis, build, test, production, operations, support, and sustainment for the F-22 statement of work. The role involves implementing security controls and requirements aligned with DoD Risk Management Framework (RMF), Joint Special Access Program (SAP) Implementation Guide (JSIG), and National Industrial Security Operating Manual (NISPOM). The candidate will work under the direction of senior security team members and be part of a diverse, multi-disciplinary team using the latest tools and methodologies. This position requires an active U.S. Secret Security Clearance and the candidate must obtain a DoD 8570 Level II Certification within 6 months of the start date.

Requirements

Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
Travel up to 10%
1+ years of experience working within the DoD Risk Managed Framework (RMF)
1+ years of experience in development, integration, validation, and verification of cyber security systems
1+ years of experience engineering/technical experience in aircraft, mission systems, or training solutions
1+ years of experience in the field of Cybersecurity, anti-tamper and/or secure computing and knowledge of Department of Defense (DoD) policies and requirements related to Cybersecurity
1+ years of experience in Software Development Lifecycle (SDLC)
Active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
Must obtain DoD 8570 Level II Certification (e.g., CompTIA Security+, CySA+) within 6 months of start date

Nice To Haves

Experience with vulnerability scanning, mitigation, administration and system hardening on multiple operating systems
Experience preparing and presenting technical material to diverse audiences (reports, engineering notes, presentations) with coaching from experienced team members.
Experience in systems/product security engineering for avionics, supporting integration of security into development by assisting senior engineers with requirements, secure architecture patterns, and system-level design activities
Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle – to inform requirements, and design
Experience assisting in identification of risks and opportunities, and collaborating with stakeholders to help define, plan, and deliver technical tasks or work packages.
Experience generating product cyber security artifacts for customer/certifiers
Experience in requirements analysis
Software experience: knowledge of higher order language programming languages (C/C++, Ada etc.), understanding of software life cycle, ability to read and understand code, and some understanding of secure code practices.
Experience with Program Protection, Software Assurance practices or Supply Chain Risk Management (SCRM) practices.

Responsibilities

Ability to work onsite 5 days a week
Support development, implementation, and sustainment of product security across the full lifecycle by developing and refining system requirements, architectures, and certification‑ready designs
Coordinate with internal and external partners (systems, software, hardware, customers, suppliers, and industry) to define cybersecurity requirements, artifacts, activities, and solutions
Conduct security assessments (threat analyses, risk assessments, audits), identify assets/vulnerabilities, risk documentation, and mitigation tracking through closure
Advise stakeholders on assessment results and provide actionable recommendations to improve architecture, designs, and software assurance
Establish, integrate, and implement product security standards, processes, and controls to meet program, certification, and regulatory requirements (e.g., JSIG, DoD RMF, NISPOM)
Support cyber test and validation activities, including tabletop exercises and verification of security controls, scan result analysis, and preparation of objective evidence for audits and reviews
Support inputs for planning, scheduling, budget, risks, issues, and opportunity activities, including early identification and communication of cost, schedule, or certification impacts
Work under guidance of senior product security engineers while independently executing assigned cybersecurity work products to completion in a teaming environment