Senior Offensive Cybersecurity Test Analyst

Boeing•Berkeley, MO

1d•Onsite

About The Position

The Boeing Company is seeking a Senior Offensive Cybersecurity Test Analyst to support the Boeing Test & Evaluation (BT&E) cyber test capability. The selected applicant will join a highly technical Test & Evaluation team building an offensive cyber test capability in Berkeley, MO. This position will be providing testing services to Boeing Defense Space & Security (BDS) portfolio. The primary responsibilities will include Product Security (Cyber) test planning, integration, and execution, mission-based risk assessments, vulnerability assessments, and penetration tests. The selected applicant will become a Berkeley team member trained across the broader BT&E Product Security Capability team.

Requirements

Active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
5+ years of experience planning and executing penetration testing of either IT based systems or Avionics embedded systems
5+ years of experience in product security, cybersecurity research, or a related field
3+ years of experience leading and mentoring a technical team
2+ years of experience leading projects or engineering teams
Able to travel both domestically and internationally

Nice To Haves

Active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
Demonstrated ability to engage with stakeholders to define/plan/resource/deliver
Experience designing and/or testing product systems
Experience facilitating and/or supporting Cyber Table Top, Mission Based Cyber Risk Assessment, or equivalent exercises
Experience planning and executing penetration tests in one or more of the following domains: Windows, Linux, VxWorks, and INTEGRITY Operating Systems IP-Based Networks Avionics, Embedded Systems, Non-Standard Ethernet Protocols (ARINC, MIL-STD) RF interfaces
Experience coordinating and presenting technical content to a diverse audience
Experience with program planning (cost and schedule)
Experience with scripting languages such as Bash, Python, PowerShell
One or more of the following Certifications: Offensive Security Certified Engineer (OSCE) Offensive Security Certified Professional (OSCP) GIAC Certified Exploit Researcher and Advanced Penetration Testers (GXPN) GIAC Reverse Engineering Malware (GREM) Certified Information System Security Professional (CISSP)

Responsibilities

Lead execution of penetration tests to identify, exploit, and assess a target system’s vulnerabilities in a threat-representative manner on embedded systems and IP-based networks
Subject Matter Expert for emulating advanced cyber adversary (advanced persistent threats) tactics, techniques and procedures (TTPs)
Lead controlled attack simulations that test the effectiveness of a blue team and its capabilities to detect, block, and mitigate attacks and breaches
Develop exploits and malware targeting modern operating systems and defenses
Communicate recommendations for improvements to customer stakeholders via reports or presentations using common frameworks such as MITRE ATT&CK, Cyber Kill Chain, etc.
Participate in test design and planning
Occasional domestic and international travel as needed