Mid-Level Product Security Engineer

Boeing • Berkeley, MO

26d

About The Position

At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. Boeing is seeking an innovative and experienced Mid-LevelProduct Security Engineer - Avionics Development to join our growing team as part of an integrated Product Security Organization, located in Berkeley, MO, Hazelwood, MO, Saint Louis, MO, Saint Charles, MO. The successful candidate will be responsible for the development, implementation, and sustainment of product cyber security and resiliency engineering for avionics through requirements, design, analysis, build, test, production, operations, support and sustainment. You will be a part of Boeing's Product Security Engineering Organization, which is a growing multi-disciplinary cybersecurity engineering organization that is responsible for the cyber security and resiliency of our products, platforms, and services. You will have the opportunity to shape and influence Product Security Engineering within Boeing and engage with Boeing's Product Security community. Furthermore, your effort will directly inform our Enterprise Product Security Engineering team with lessons learned and technologies, that directly enhances our commercial and defense offerings.

Requirements

• Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
• 5+ years of related work experience or an equivalent combination of education and experience
• Understanding of cybersecurity controls, frameworks, and the vulnerability management lifecycle
• Experience in architecture, design, management, administration and troubleshooting of networks with a focus on security controls and firewall administration
• Experience in cyber security and/or product security engineering
• Experience in analysis of customer security requirements and deriving detailed security requirements, architecture & design
• Demonstrated ability to identify new opportunities and engage with stakeholders to define, plan, resource and deliver solutions
• Experience with the development of cybersecurity philosophies, patterns, requirements, secure architectures and designs
• Experience coordinating and presenting technical content to a diverse audience, as well as preparing technical documentation
• Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle - to inform requirements, and design
• Experience generating product cyber security artifacts for customer/certifiers
• Experience with defense security standards (DoDI 8510.01, ICD-503, CNSSI-1253, NIST 800-53) to perform risk analysis and provide strategic direction for system architectures, operations and delivered products

Nice To Haves

• Security certification is desired: DoD 8570.01M / DoDD 8140.01 certification at IASAE Level II or higher (such as Security+ CE, GSEC, SSCP, CISSP, CISA, CCNA-Security)
• Experience with military avionics and military platform operations

Responsibilities

• Develop and enhance the enterprise OT Vulnerability Management Program to deploy OT aware scanning and patching tooling across targeted OT environments such as production equipment, facilities, and labs
• Lead the development, implementation, and sustainment of product security for Boeing avionics systems, throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle
• Coordinate with platforms and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions
• Coordinate with other engineering stakeholders - systems, software, and hardware - advising on the results of security analysis - to develop secure architectures and designs
• Lead, establish, and integrate standards and processes for product security engineering for avionics development, and to meet applicable program and certification requirements
• Utilize the Risk Engineering digital thread to inform product requirements surrounding cyber survivability against specified cyber threats - by performing criticality, adversity, threat analysis for avionics systems
• Assessing internal customer requirements to derive strategies and detailed security requirements system and technical requirements
• Executing PSE activities - security requirements, architectures, risk assessments
• Documenting PSE activities and delivering PSE artifacts
• Lead risk reduction and technology maturation activities - where appropriate - resulting in innovative solutions in product and services offering
• Identifying and elevating product security risks to the integrated product team(s) and management

Benefits

• At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
• The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.
• The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Transportation Equipment Manufacturing
• Number of Employees: 5,001-10,000 employees