Open Source Security Compliance Engineer, Experienced or Senior (Virtual)

Boeing • Orlando, FL

6d • Remote

About The Position

Open Source Security Compliance Engineer, Experienced or Senior (Virtual) Company: The Boeing Company The Boeing Company is currently seeking Open Source Security Compliance Engineer, (Experienced or Senior) (Virtual) to support our Open Source Program Office located in Orlando, Florida (Virtual). This position will focus on supporting the Products and Capabilities team. The Open Source Program Office’s mission is to champion open-source engagement across the enterprise and deliver a world class open-source management experience with flawless compliance. To fulfill that mission, we are looking for a Software Security Engineer to evaluate and mitigate security risks within the enterprise’s use and contribution of open-source software, perform product security risk, vulnerability analyses, and security audits. The individual selected will also be automating security assessments and translating the Chief Engineer's strategic security analysis (risk assessments, policy definitions) into automated and integrated open-source security practices for the rest of the company. This position has been identified as a virtual opportunity and will not require the selected candidate to relocate.

Requirements

• 1+ years’ experience with software licensing and knowledge of issues with the use of third party and open-source software
• 2+ years’ experience in the application of software cybersecurity principles and techniques
• 3+ years’ experience in software development lifecycle
• Ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship
• Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science

Nice To Haves

• Ability to independently make and execute Software product level licensing decisions
• Ability to interact effectively with Legal, Ethics, and Program Management
• Previous experience performing license assessments and working licensing issues
• Excellent communication skills, both verbal and written

Responsibilities

• Operationalize the open-source policy and process through automation
• Independently investigate, analyze, and resolve licensing issues, driving for business-based outcomes
• Automate Software Composition Analysis (SCA) through a combination of COTS, open source, and in-house tooling. Conduct trade studies and work with Product Owners to meet requirements for a broad range of stakeholders
• Manage the configuration and output of dependency scanners, triage critical open-source software vulnerabilities, and ensure timely remediation with development teams.
• Translate approved legal/license policies into code-based checks and automated tooling to prevent incompatible license usage in new projects.
• Engineer and maintain security and license scanning tools; enforce compliance by ensuring automated build failures upon policy violation.
• Document all automated processes and serve as the technical liaison, transferring security analysis into scalable, repeatable engineering practices across the enterprise.
• Collaborate with the Product Owner on the backlog and technical roadmap
• Seek out additional automation opportunities
• Track and improve KPIs

Benefits

• At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent.
• Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
• The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.
• The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level