Mid-Level Product Security Engineer

Boeing•Saint Charles, MO

1d•Onsite

About The Position

Boeing is seeking an innovative and experienced Mid-Level Product Security Engineer - Avionics Development to join their team as part of an integrated Product Security Organization. The successful candidate will be responsible for the development, implementation, and sustainment of product cyber security and resiliency engineering for avionics through requirements, design, analysis, build, test, production, operations, support and sustainment. You will be a part of Boeing's Product Security Engineering Organization, a growing multi-disciplinary cybersecurity engineering organization responsible for the cyber security and resiliency of their products, platforms, and services. This role offers the opportunity to shape and influence Product Security Engineering within Boeing and engage with Boeing’s Product Security community. Your efforts will directly inform the Enterprise Product Security Engineering team with lessons learned and technologies, enhancing commercial and defense offerings.

Requirements

Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
5+ years of related work experience or an equivalent combination of education and experience
Experience with commercial and/or military aircraft avionics
Experience in deriving technical requirements from customer input or eliciting customer requirements
Experience solving complex business problems and delivering solutions via technology
Experience in presenting technical briefings to various audiences
Knowledge of security practices and principles associated with risk analysis and assessment

Nice To Haves

Active technical security certification (ex. ISC2 – International Information System Security Certification, CISSP – Certified Information Systems Security Professional, GIAC - Global Information Assurance Certification)
Experience designing, supporting, or executing AI, data, privacy, cybersecurity, or other technology risks assessments and translating findings into practical controls and process improvements
Experience in security domain, e.g. defining penetration testing, architecting product security posture
Experience working with and/or developing embedded systems
Experience in the field of Cybersecurity, anti-tamper and/or secure computing and knowledge of Department of Defense (DoD) policies and requirements related to Cybersecurity
Experience in a combination of test planning and execution including; Cyber Test and Evaluation activities such as penetration testing, threat, adversity and risk analysis, and exploitation tool development, tailoring, and use and general cybersecurity engineering
An active U.S. Security Clearance in the past 24 months

Responsibilities

Development, implementation, and sustainment of product security for Boeing avionics systems, throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle
Coordinate with platforms and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions
Coordinate with other engineering stakeholders – systems, software, and hardware – advising on the results of security analysis – to develop secure architectures and designs
Establish and integrate standards and processes for product security engineering for avionics development, and to meet applicable program and certification requirements
Utilize the Risk Engineering digital thread to inform product requirements surrounding cyber survivability against specified cyber threats – by performing criticality, adversity, threat analysis for avionics systems
Assess internal customer requirements to derive strategies and detailed security requirements system and technical requirements
Execute PSE activities – security requirements, architectures, risk assessments
Document PSE activities and deliver PSE artifacts
Perform risk reduction and technology maturation activities resulting in innovative solutions in product and services offering
Identify and elevate product security risks to integrated product team(s) and management