Product Security Analyst /Cyber Security Analyst (Associate)

Boeing • Oklahoma City, OK

32d

About The Position

Product Security Analyst /Cyber Security Analyst (Associate) Company: The Boeing Company Boeing Global Services (BGS) is currently looking for a Product Security Analyst / Cyber Security Analyst , Level 2 to join our team in Oklahoma City, OK . The successful candidate will focus on cybersecurity efforts at the multiple avionics laboratories used by the C-17 Globemaster III program. The C-17 avionics laboratories are comprised of a number of complex software development and formal qualification facilities that use both emulated and physical avionics that are used on the aircraft. This role focuses on protecting the C-17 product (hardware, avionics, software, and supporting systems) across development, test, and sustainment phases by identifying and mitigating security risks, ensuring compliance with DoD and company requirements, and enabling secure engineering and test practices. The C-17 Product Security Analyst researches, analyzes, and compiles technical data to integrate security and resiliency into products and services across the lifecycle, ensuring compliance with certifications and customer requirements. The role conducts system-level security assessments including risk, attack-surface, vulnerability, and anti-tamper analyses and performs security audits of applications and stacks from diverse sources. Responsibilities include triaging, aggregating, escalating, and reporting security indicators, coordinating incident response, correlating trends, and analyzing malware and adversary tactics to enhance detection and mitigation. The analyst produces and delivers technical reports and briefings to inform program decisions and sustain security posture over the program lifecycle.

Requirements

• Bachelor’s degree in a technical discipline or equivalent experience
• 2+ years’ experience in project or security operations teams
• Experience with system security domains (e.g., information assurance, intrusion detection, software protection, software assurance, communications security, encryption and key management, network security, certification and accreditation) and applicable industry and government guidance and regulations to produce secure systems.
• Experience working in a distributed environment and multiple teams
• Experience working with Information Technology in a Weapon System context
• Experience with network and host-based Intrusion Detection Systems (IDSs) and Security Incident Event Management (SIEM)
• Cyber-related certification(s) such as Security+ or CISSP
• Ability to understand the big picture and the inter-relationships of all positions and activities in the system, including the impact of changes in one area on another area. This includes the ability to see and understand the inter-relationships between components of systems and plans, anticipate future events, and apply the principles of systems thinking to accelerate performance
• Knowledge of aircraft systems, components, and loadable/non-loadable software
• Skill and ability to: collect, organize, synthesize, and analyze data; summarize findings; develop conclusions and recommendations from appropriate data sources
• Resolves cross-functional technical issues
• This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship. An interim and/or final U.S. Secret Clearance Post-Start is required.
• This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Nice To Haves

• Knowledge of the DoW policies and requirements related to cybersecurity are a plus, along with certifications such as Security+ or CISSSP
• Mentor and coach less experienced personnel to apply risk management and performance measures
• Identify and quantify potential risks, understand design constraints (technical, cost & schedule)
• Identify and trade alternatives (i.e., trade studies), select/recommend the best plan for mitigating complex risks
• Implement/execute plans for mitigating risk and establish appropriate performance tracking metrics to track risk burn down over time
• Ability to troubleshoot hardware, software, and network security anomalies, with an understanding of how to accomplish activities in a restricted configuration-controlled system and networking environment

Responsibilities

• Ensure Cybersecurity, NIST 800, and IT compliance for C-17 Avionics Labs.
• Develops, implements, and sustains product security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle
• Develops and enhances system requirements and architectures for product security to meet all applicable certification and customer requirements.
• Ensures security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support
• Defines and identifies product security requirements for suppliers of components and subsystems for integration into Boeing products and services.
• Coordinates with governments, customers, suppliers, and industry to identify risks and improve industry and regulatory security standards and requirements for programs and interfacing systems
• Conducts research and development activities resulting in innovative solutions
• Advises customers on maintaining product security and certification, including security consequences of modifying products and services.
• Support cyber risk assessments and the development of Risk Assessment Report (RAR)
• Develop and maintain a Security Assessment Plan (SAP) for the labs
• Support development of Interim Authority to Test (IATT) and Authority to Operate (ATO) packages

Benefits

• At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent.
• Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
• The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.
• The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level