Cyber A&A Engineer

Boeing•Colorado Springs, CO

6d•$128,350 - $173,650•Onsite

About The Position

The Boeing Company is seeking a Cyber A&A Engineer in Colorado Springs, CO. Boeing’s Missile Defense Program is seeking motivated and talented professionals to join its team supporting the National Team Command, Control, Battle Management and Communications (C2BMC) Programs & Networks. Missile Defense programs are part of the Ballistic Missile Defense System which defends the United States homeland and its regional allies all over the world. Be a part of our passionate and highly motivated team who are excited to be on the forefront of defense of our nation.

Requirements

Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement.
Minimum 5 or more years' related work experience.
IAT Level II/ IAM Level I DoD 8570 certification (CompTIA Security+ CE or equivalent)
Security engineering skills with a working knowledge of cybersecurity technology and DoD/Federal cybersecurity policy (i.e., DoDI 8500.01, NIST SP 800-53, etc.).
Understanding and utilization of Enterprise Mission Assurance Support Service (eMASS)
Understanding of Risk Management Framework (RMF) Cybersecurity Lifecycle to include: identifying controls and overlays, generating testable requirements, identifying resilient architecture design, configuring, running, and scripting audit tools, providing analysis of vulnerability analyses, conducting verification testing for compliance assessment.
Knowledge of Software Assurance (SwA) static and dynamic code analysis (e.g. Fortify/SonarQube)
This position requires an active Top Secret U.S. Security Clearance. (A U.S. Security Clearance that has been active in the past 24 months is considered active.)
U.S. Citizenship Required

Nice To Haves

Windows and Red Hat Enterprise Linux (RHEL) system administration skills
Previous background working in a virtual environment.
Previous background working with dockers and containers
Administer ACAS and ESS (formally HBSS)
Previous experience with ConfigOS

Responsibilities

Process and track DD Form 2875 user account forms and required training for privileged and non-privileged accounts, perform annual validation of accounts, and work with system administrator on creation, modification, and removal of accounts
Perform assessment of systems and networks within a virtual environment and identify where those systems deviate from acceptable configurations, enclave policy, or local policy. This is achieved through passive evaluations such as compliance audits using STIG Viewer, SCAP, etc. and active evaluations such as vulnerability assessments utilizing ACAS.
Perform Security Technical Implementation Guide (STIG) assessments and hardening for both Windows, Red Hat Enterprise Linux (RHEL) systems, and networking equipment utilizing ConfigOS
Develop test plans reflecting how STIG checks are implemented and be able to show expected outcomes of those checks
Update Risk Management Framework (RMF) artifact documentation to ensure system hardening non-compliant is tracked and remediated.
Establish strict program control processes to ensure mitigation of risks and supports obtaining assessment and authorization of systems. Includes support of process, analysis, coordination, control certification test, compliance documentation, as well as investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Assist in the implementation of the required government policy (i.e., NISPOM, NIST, DoD), making recommendations on process tailoring, participating in and documenting process activities.
Perform analyses to validate established cybersecurity controls and requirements and to recommend cybersecurity safeguards.
Support program test milestones through pre-test preparations, participating in the tests, analysis of the results, and preparation of required artifacts supporting authorization.
Prepare artifacts such as Test Results (TR), Authorization Boundary Diagrams (ABD), Network Topologies, Flow-diagrams, Hardware and Software listings, Ports, Protocols, and Services Management documentation, supporting Assessment and Authorization activities and maintaining the Plan of Actions and Milestones (POA&M).
Periodically conduct a complete review of each program support and operational system's audits and monitor corrective actions until all actions are closed.
Coordinate across the program to address identified deficiencies during RMF assessment activities.

Benefits

generous Paid Time Off (PTO)
flexible work schedules
paid parental leave for mothers and fathers
401k matching
tuition assistance for earning advanced degrees
paid medical leave programs
health insurance
flexible spending accounts
health savings accounts
retirement savings plans
life and disability insurance programs
paid and unpaid time away from work
401k Plan: The Boeing 401(k) helps you save for your future, with contributions from Boeing that can help you grow your retirement savings.
Best in class 401(k) plan: we'll match your contributions dollar for dollar, up to 10% of eligible pay with Immediate 100% vesting
Student Loan Match: The Boeing 401(k) Student Loan Match allows eligible enrolled U.S. employees to have their qualified student loan debt payments counted, along with any match-eligible contributions they make, for purposes of determining the Company Match to employees' Boeing 401(k) accounts.
Employee Referral Eligibility: $1500 is the projected amount to offer for employee referral bonuses for this position.