Product Security Engineer, Associate

Boeing•Mountain View, CA

2d•$108,000 - $147,200•Onsite

About The Position

The Boeing Company is seeking a Product Security Engineer, Associate in Mountain View, CA. This role involves supporting the development, implementation, and sustainment of product security and resiliency throughout the entire product lifecycle, from requirements and design to production, operations, and support. The position requires managing and securing DoD information systems, ensuring compliance with NIST 800-53 and DISA STIGs, and participating in research and development for innovative solutions. Responsibilities include developing Plans of Action and Milestones (POAMs), supporting technical systems and application activities, ensuring the security of facilities and resources, troubleshooting secure network architectures, assisting with system and network administration, documenting and maintaining computer applications, and evaluating system compatibility and architectural objectives. A key aspect of the role is integrating security and resiliency into products and services to meet certifications and customer requirements, supporting product security risk/attack surface/vulnerability analyses, and analyzing security data for attack indicators and potential breaches. The role also involves assisting in incident coordination, performing trend analysis, analyzing malware, and preparing technical reports and briefings.

Requirements

Bachelor's degree from an accredited course of study in engineering, engineering technology, computer science, engineering data science, mathematics, physics, or chemistry, and typically 2 or more years of related work experience.
2+ years of experience performing cybersecurity functions and supporting computer applications in an operational (mission critical) mode.
2+ years of experience performing systems administration and/or network administration tasks to include installation and configuration of servers.
Possess a minimum of (IAT Level 2) CompTIA Security+, or other relevant cybersecurity certifications.
Ability to collect, organize, synthesize, and analyze data, and summarize findings, conclusions, and recommendations.
Experience identifying system susceptibility, survivability, and vulnerability.
Knowledge of system security domains and applicable industry and government guidance and regulations.
Ability to communicate effectively with technical personnel across multiple disciplines.
This position requires a minimum U.S. Secret Security Clearance for which the U.S. Government requires U.S. Citizenship, with the ability to obtain and maintain a final U.S. Top Secret Clearance post-start.
U.S. Citizenship required for security clearance.
Must be able to obtain and maintain a final U.S. Top Secret Clearance post-start.

Nice To Haves

Certified Information Systems Security Professional (CISSP)
Demonstrated ability to develop creative solutions to technical problems.
Demonstrated commitment to quality and safety in technical work environments.
Knowledge of cyber security incident response protocols, including identification, impact assessment, containment, remediation, evidence handling, and technical reporting.
Knowledge and understanding of risk management methodology and processes, including trade studies and mitigation planning.
Ability to effectively utilize risk management tools to support program or project execution.
Knowledge of engineering disciplines applied to product-related systems throughout the product development life cycle.
Knowledge of various engineering disciplines such as electrical, mechanical, and systems.
SIPRNet configuration and compliance experience
SIPR Cyber Operational Readiness Assessment (CORA) audit preparation experience
Assured Compliance Assessment Solution (ACAS) experience or certification
Red Hat Linux and Windows workstation/server environments
VMware ESXi and vCenter experience
Data Domain and Unity storage experience
Dell EMC Networker backup experience
Trellix ePO (ePolicy Orchestrator) experience
SolarWinds Platform experience
Splunk experience
Microsoft SQL Server experience

Responsibilities

Support the development, implementation, and sustainment of product security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle.
Process and analyze computing and cybersecurity requirements.
Manage and secure DoD information systems ensuring compliance with National Institute of Standards and Technology (NIST) 800-53 and Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs).
Support research and development activities resulting in innovative solutions.
Develop Plans of Action and Milestones (POAMs) to address meeting cybersecurity requirements.
Participate in a multidisciplinary range of technical systems and application support activities.
Support the installation, configuration, and maintenance of multiplatform systems hardware, software, and components.
Ensure security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support.
Troubleshoot secure network architectures.
Assist as needed in system administration and network administration.
Document, implement, and maintain computer applications.
Assist with evaluation of architecture to ensure compatibility with computing system.
Assist in evaluating systems against architectural objectives.
Support the integration of security and resiliency into products and services throughout the lifecycle of the product/service to meet all applicable certifications and customer requirements.
Support the research, collection, interpretation, test, and analysis of technical data for system-level product security concepts in the projected operational environments to optimize effectiveness over the program lifecycle.
Support product security risk/attack surface/vulnerability analyses and security audits of applications and application stacks of various provenances.
Support the analysis, triage, aggregation, escalation, and reporting of relevant product security and anti-tamper data and other information sources for attack indicators and potential security breaches.
Assist in coordination during incidents.
Support the correlation and performance of trend analysis.
Analyze malware and attacker tactics to improve detection capabilities.
Prepare and present basic technical reports and briefings.

Benefits

401k Plan: The Boeing 401(k) helps you save for your future, with contributions from Boeing that can help you grow your retirement savings. Our best-in-class retirement benefit features: Best in class 401(k) plan: we'll match your contributions dollar for dollar, up to 10% of eligible pay with Immediate 100% vesting
Student Loan Match: The Boeing 401(k) Student Loan Match allows eligible enrolled U.S. employees to have their qualified student loan debt payments counted, along with any match-eligible contributions they make, for purposes of determining the Company Match to employees' Boeing 401(k) accounts.
competitive base pay
variable compensation opportunities
health insurance
flexible spending accounts
health savings accounts
retirement savings plans
life and disability insurance programs
programs that provide for both paid and unpaid time away from work