Offensive Cybersecurity Test Engineer (Associate, Experienced, or Lead)

Boeing • Berkeley, MO

2d

About The Position

The Boeing Company is seeking Offensive Cybersecurity Test Engineers to support the Boeing Test & Evaluation (BT&E) cyber test capability. The selected applicant will join a highly technical Test & Evaluation team building an offensive cyber test capability in Berkeley, MO. This position will be providing testing services to Boeing Defense Space & Security (BDS) portfolio. The primary responsibilities will include Product Security (Cyber) test planning, integration, and execution, mission-based risk assessments, vulnerability assessments, and penetration tests. The selected applicant will become a Berkeley team member trained across the broader BT&E Product Security Capability team. Our teams are currently hiring for a broad range of experience levels including Associate, Experienced and Lead level Offensive Cybersecurity Test Engineers.

Requirements

• Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science
• 3+ years of experience directing and executing projects in accordance with stakeholder objectives and schedules
• 1+ years of experience working with Department of Defense (DoD) organizations, projects and/or programs
• 1+ years of experience in product security, cybersecurity research, or a related field
• 1+ years of experience planning and executing penetration testing of either IT based systems or Avionics embedded systems
• Experience in system and software architectures
• Able to travel both domestically and internationally
• This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
• This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Nice To Haves

• Level 3: 3 or more years' related work experience or an equivalent combination of education and experience
• Level 4: 5 or more years' related work experience or an equivalent combination of education and experience
• Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle
• Experience hosting events like Cyber Table Tops and Mission Based Cyber Risk Assessments
• Experience working with stakeholders to integrate, plan and execute test events
• Demonstrated ability to engage with stakeholders to define/plan/resource/deliver solutions (state years of experience)
• Experience working with Product Security (non-IT) Cyber Compliance and/or Avionics Embedded systems risk management assessment
• Experience supporting Cyber Table Top, Mission Based Cyber Risk Assessment, or equivalent exercises
• Experience evaluating cybersecurity in one or more of the following domains: Windows, Linux, VxWorks, and INTEGRITY Operating Systems; IP-Based Networks; Avionics, Embedded Systems, Non-Standard Ethernet Protocols (ARINC, MIL-STD); or RF interfaces
• Experience with cybersecurity compliance frameworks such as NIST CSF, DoD RMF, CMMC or PCI/DSS
• Experience designing and/or testing product systems
• Experience with program planning (cost and schedule)

Responsibilities

• Execute penetration tests to identify, exploit, and assess a target system’s vulnerabilities in a threat-representative manner on embedded systems and IP-based networks
• Implement test campaigns aligned with the DoD Cybersecurity T&E best practices
• Conduct Mission Based Cyber Risk Assessments (MBCRAs) and Cyber Table Tops (CTTs)
• Define cyber test plans and schedules for complex architectures and translate to actionable tasks
• Perform event planning in coordination with multiple stakeholders
• Provide team leadership, direction, and coordination resulting in test readiness
• Align technical test findings to stakeholder objectives and map attack surface coverage
• Coordinate prioritization and completion of test cases in accordance with the test plan
• Complete post-test reporting as a part of the test team
• Represent Product Security T&E in engagements with Boeing, suppliers and customer leadership
• Develop and mature Product Security T&E processes, best practices, and solutions
• Occasional domestic and international travel as needed

Benefits

• At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.
• Pay is based upon candidate experience and qualifications, as well as market and business considerations.
• Relocation: This position offers relocation based on candidate eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Number of Employees: 5,001-10,000 employees