Product Security Engineer

Boeing•Hazelwood, MO

3d•Onsite

About The Position

Product Security Engineer Company: The Boeing Company Boeing's Global Services has multiple openings for a Product Security Engineer at various levels. Boeing Global Services (BGS) is seeking Product Security Engineers at various levels to join our Central Product Security team. You will help protect government training systems, aircraft support equipment, and related products by providing technical support across the product lifecycle—from requirements and design through sustainment. Our portfolio includes programs such as P-8A Poseidon, F/A-18 Super Hornets/Growlers, F-15 Eagle, MQ-25 Stingray, T-7A Red Hawk, F-22 Raptor, and V-22 Osprey.re SPEEA representation applies, this job family will be covered by the terms of the collective bargaining agreement. Applicable and appropriate educational/certification credentials from an accredited institution and/or equivalent experience is required. Position Responsibilities Develop and refine system requirements and architectures to meet certification and customer security needs. Collaborate with internal and external stakeholders—including customers, suppliers, and industry partners—to identify and mitigate security risks. Provide recommendations to enhance industry and regulatory security standards. Advise customers on product security, certification processes, and impacts of modifications. Integrate security practices across the product lifecycle in partnership with cross-functional teams. Conduct security assessments, audits, threat and risk analyses, and recommend mitigations. Build and evaluate network and software system architectures. Support cyber test activities, including tabletop exercises. Assess software assurance activities to ensure secure software pedigree. Identify assets and evaluate risks, threats, and vulnerabilities in accordance with industry and government standards. Ensure designs uphold integrity, availability, confidentiality, and non-repudiation. Implement security controls aligned with JSIG, DoD RMF, NISPOM, and other relevant policies. Work independently with minimal direction (Level 3) or under guidance (Levels 1-2). This position is expected to be 100% onsite in St. Louis, MO. This position requires the ability to obtain a US Security Clearance for which the US Government requires US Citizenship. An interim and/or final U.S. secret clearance Post Start is required.

Requirements

Bachelor’s degree in engineering, engineering technology, chemistry, physics, mathematics, or computer science from an accredited institution.
An internship or 1+ years of Product Security Engineering experience.
Internship or 1+ years of Learning and applying security principles; supporting assessments and documentation
Experience or knowledge in product security or cybersecurity concepts scaled to level.
Experience coordinating and presenting technical content and preparing documentation.
Knowledge of cybersecurity incident response protocols.
Experience with Risk Management Framework (RMF) processes and NIST/DoD standards.
This position requires the ability to obtain a US Security Clearance for which the US Government requires US Citizenship. An interim and/or final U.S. secret clearance Post Start is required.
This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Nice To Haves

Experience with vulnerability scanning, mitigation, and administration on Windows (XP, 7, 10), Linux, and Oracle Solaris.
DoD 8570 Level II Certification (e.g., CompTIA Security+, CySA+).
2+ years developing cybersecurity philosophies, secure architectures, and requirements (Level 2+).Product cybersecurity experience in avionics systems and component-level development.
2+ years of Product Security Engineering experience
Familiarity with DevSecOps principles.
Understanding of Concept of Operations, requirements, and use-case development.
Experience in risk assessment, threat modeling, and vulnerability analysis of embedded systems.
Knowledge of hardware/software integration and safety-critical embedded systems.
Participation in cybersecurity competitions, collaborative projects, or professional organizations.
Experience generating cybersecurity artifacts for customers/certifiers.
Security certifications such as CISSP.
Experience with military aircraft systems.
Software skills: proficiency in C/C++, Ada, understanding of software lifecycle, and secure coding practices.

Responsibilities

Develop and refine system requirements and architectures to meet certification and customer security needs.
Collaborate with internal and external stakeholders—including customers, suppliers, and industry partners—to identify and mitigate security risks.
Provide recommendations to enhance industry and regulatory security standards.
Advise customers on product security, certification processes, and impacts of modifications.
Integrate security practices across the product lifecycle in partnership with cross-functional teams.
Conduct security assessments, audits, threat and risk analyses, and recommend mitigations.
Build and evaluate network and software system architectures.
Support cyber test activities, including tabletop exercises.
Assess software assurance activities to ensure secure software pedigree.
Identify assets and evaluate risks, threats, and vulnerabilities in accordance with industry and government standards.
Ensure designs uphold integrity, availability, confidentiality, and non-repudiation.
Implement security controls aligned with JSIG, DoD RMF, NISPOM, and other relevant policies.
Work independently with minimal direction (Level 3) or under guidance (Levels 1-2).

Benefits

Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume