Product Security Analyst (Mid-Level or Experienced)

Boeing • Aurora, CO

10d • $103,000 - $183,000

About The Position

The Boeing Company is hiring a Product Security Analyst to support a proprietary program involving activities in several states. The position is based in Aurora, Colorado, with options to work out of Seal Beach or El Segundo, California. The successful candidate will support cybersecurity throughout all phases of a program and work closely with customers to provide a secure system. The role works under minimal direction and requires approximately 25% travel for customer and internal meetings.

The analyst applies an interdisciplinary, collaborative approach to planning, designing, developing, validating, and verifying lifecycle-balanced information-system security solutions. The work includes implementing cybersecurity features and Risk Management Framework processes for embedded computing systems; defining and coordinating security requirements; assessing product assets, risks, threats, and vulnerabilities; and evaluating remediation recommendations and mitigation costs. The role also applies system-security processes, methods, and tools, resolves cross-functional technical issues, performs Accreditation and Authorization activities under applicable customer requirements, and coordinates security activities with engineering, administration, testing, validation, and program-management teams.

Applicants must have an active U.S. TS/SCI clearance before starting and meet U.S. citizenship and export-control requirements. Boeing describes the role as a Shift 1 position. The position is not contingent on program award and is not safety-sensitive. Relocation assistance is not negotiable, and visa sponsorship is not available.

Requirements

• Bachelor’s degree and typically at least 6 years of related work experience, or a master’s degree and at least 4 years of related work experience; 10 or more years of directly related experience may substitute for a degree.
• DoD 8570 IAT Level II certification.
• Experience with information-systems security.
• Active U.S. TS/SCI security clearance required before starting; U.S. citizenship is required for the clearance.
• Must meet U.S. export-control compliance requirements as a U.S. Person.
• Successful candidate must satisfy the company’s Conflict of Interest assessment process.

Nice To Haves

• Experience with DevSecOps and Continuous Integration/Continuous Delivery (CI/CD).
• Successful completion of a Counter-Intelligence Polygraph.
• Technical education in engineering, engineering technology, computer science, engineering data science, mathematics, physics, or chemistry; ABET accreditation is preferred but not required.

Responsibilities

• Plan, design, develop, validate, and verify lifecycle-balanced information-system security solutions using an interdisciplinary, collaborative approach.
• Implement cybersecurity features on program systems and implement RMF processes for embedded computing systems.
• Evaluate customer and operational needs to define and coordinate system-security requirements, integrate technical parameters, and ensure compatibility of physical, functional, and program interfaces.
• Analyze system-of-systems and system architectures; identify product assets and assess risks, threats, and vulnerabilities in accordance with industry, professional, and government standards.
• Help ensure security-design integrity, availability, confidentiality, non-repudiation, and contract compliance.
• Evaluate remediation recommendations and develop cost-to-mitigate estimates.
• Apply system-security processes, methods, and tools consistently and resolve cross-functional technical issues.
• Implement Accreditation and Authorization activities under ICD 503 RMF, NISPOM, or the DoD Overprint to NISPOM, as required by customers.
• Coordinate security activities and requirements with system administrators, network and software engineers, test and validation engineers, and program management.
• Travel approximately 25% for customer and internal meetings.

Benefits

• Competitive base pay and variable compensation opportunities.
• Eligible employees may enroll in health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life insurance, disability insurance, and programs providing paid and unpaid time away from work.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level