Product Security Analyst

Boeing • Hazelwood, MO

4d • Onsite

About The Position

The Boeing Company is looking for a Product Security Analyst to join our team in Hazelwood, MO. Come join the Boeing Defense, Space & Security (BDS) Air Dominance (AD) Product Security Engineering (PSE) organization as an associate-level Product Security Analyst to provide technical support for product cyber security and resiliency engineering for embedded systems through requirements, design, analysis, build, test, production, operations, support and sustainment in the Air Dominance & Phantom Works current/future portfolio in Hazelwood, MO. You are going to be part of Boeing's AD PSE Organization, which is a growing multi-disciplinary cybersecurity engineering organization, that is responsible for the cyber security and resiliency of our embedded systems within products, platforms, and services. This is your opportunity to shape and influence Product Security Engineering across the BDS AD portfolio of products. The AD PSE team’s portfolio spans exciting programs such as F/A-18 Super Hornet/Growlers, F-15 Eagle (domestic & international), MQ-25A Stingray, T-7A Red Hawk, Proprietary Programs and Phantom Works efforts. This role supports the implementation of security controls and requirements aligned with Department of War (DoW) Risk Management Framework (RMF), Joint Special Access Program (SAF) Implementation Guide (JSIG), and National Industrial Security Operating Manual (NISPOM) as required by customers, working under the direction of senior security team members. In joining Boeing, you are going to be a part of a diverse multi-disciplined team of engineers and analysts, while utilizing the latest tools and methodologies! Along with developing your technical competence and leadership skills at a company with huge potential for long-term career growth. At Boeing, we value your curiosity, your determination, and your imagination.

Requirements

• Bachelor’s degree & typically 3 or more years of related work experience or equivalent combination of education and experience (e.g. Master’s +1-year related experience, 7 years related work experience)
• Experience in documenting, identifying, scanning and testing for software vulnerabilities
• Experience in writing and documenting reports on security findings and maintaining that documentation
• 1+ years’ experience in ability to identify new opportunities and engage with stakeholders to define, plan, resource and deliver solutions
• 1+ years’ experience in coordinating and presenting technical content to a diverse audience, as well as preparing technical documentation
• This position requires an ability to obtain and maintain an active Secret U.S. Security Clearance. An interim and/or final U.S. Secret Clearance Post-Start is require d

Nice To Haves

• Experience or education in cyber security incident response protocols (identification, impact assessment, containment, remediation, evidence handling, technical reporting, etc.) and safeguarding information
• 1+ years’ experience in the development of avionics subsystems
• 1+ years’ experience in assisting with the development of cybersecurity philosophies, patterns, requirements, secure architecture and designs
• Experience supporting the design, development, and testing of engineering solutions, ensuring compliance with industry standards and regulations
• Experience in product cyber security for avionics systems and component level assessments
• Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle – to inform requirements, and design
• Experience generating product cyber security artifacts for customer/certifiers
• Security certification is desired (e.g. CISSP, Security+); please state/include on resume

Responsibilities

• Support the development, implementation, and sustainment of product security for systems, throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle for embedded avionics systems/subsystems
• Coordinate with partners and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions
• Coordinate with other engineering stakeholders – systems, software, and hardware – advising on the results of security analysis – to develop secure architectures and designs
• Assist in establishing, integrating standards and processes for product security engineering in support of embedded avionics development, and meet applicable program/certification requirements
• Supports product security risk/attack surface/vulnerability analyses and security audits of applications and application stacks of various provenances embedded avionics systems
• Assist in risk reduction and technology maturation activities – where appropriate – resulting in innovative solutions in product and services offering
• Implements appropriate security controls and requirements per JSIG, DoD and ICD 503 RMF, NISPOM, or DoD Overprint to the NISPOM
• Support inputs for planning, scheduling, risks, issues, and opportunity activities for cyber security
• Support the preparation and presentation of technical reports/briefings

Benefits

• 401k Plan: Boeing 401(k) helps you save for your future, with contributions from Boeing that can help you grow your retirement savings. Our best-in-class retirement benefit features: Best in class 401(k) plan: we'll match your contributions dollar for dollar, up to 10% of eligible pay with Immediate 100% vesting
• Student Loan Match: The Boeing 401(k) Student Loan Match allows eligible enrolled U.S. employees to have their qualified student loan debt payments counted, along with any match-eligible contributions they make, for purposes of determining the Company Match to employees' Boeing 401(k) accounts.
• health insurance
• flexible spending accounts
• health savings accounts
• retirement savings plans
• life and disability insurance programs
• a number of programs that provide for both paid and unpaid time away from work

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level