Senior Product Security Engineer

Boeing•Seattle, WA

18h•Onsite

About The Position

The Boeing Company is looking for a Senior Product Security Engineer to join the Enterprise Product Security organization in Seattle, WA or Everett, WA, to support Secure Software Distribution and Ground Support Equipment and Information Systems for Boeing Commercial Aircraft. The successful candidate will be responsible for driving the development, implementation, and sustainment of product security and resiliency throughout the product lifecycle, protecting our commercial airplanes’ products and the aviation ecosystem. As a member of the Enterprise Product Security organization, you will work with security experts across all business units, and will have exposure to a large variety of products and services.

Requirements

Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
9+ years of related engineering work experience
2+ years of experience in systems engineering, systems integration, software engineering, electrical engineering, certification, network security and/or cybersecurity
Must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Nice To Haves

Experience in engineering discipline(s) (e.g., electrical, mechanical, software engineering) applied to product related systems (e.g., aircraft, avionics systems) throughout the product development life cycle, from concept development to deployment
Experience in systems engineering and/or airplane configuration integration
Experience working with airline operations and maintenance organizations
Experience in computing equipment and its operating systems (e.g. Windows, Unix, Linux, and Open Source Tools)
Experience with Vulnerability assessment and/or Penetration test
Experience analyzing data, creating reports, and presenting results
Certified Application Security Engineer (CASE), Security+, a CISSP certification, or equivalent Cyber Security certification (CISSP preferred)

Responsibilities

Provides security support/guidance to Airline Operators on ground-based systems and commercial aircraft platforms, PKI implementation, and cryptographic standards
Conducts and leads security risk assessments of Airplane connected systems and ground-based information systems including end-to-end distribution of airborne software
Manages risk in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance
Develops security requirements and coordinate with multiple system stakeholders to identify and properly implement and verify security measures to mitigate the risks, threats and vulnerabilities
Performs requirements verification on software security engineering products using inspection, analysis, demonstration, and test methods
Performs Common Vulnerabilities and Exploits (CVE) analysis and coordinate with system stakeholders to appropriately mitigate and address to reduce likelihood and consequences of CVE impacting system operation
Provides technical data and develop documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery
Leads interactions across Boeing teams, Airline Operators, Industry Standards, and Regulatory Organizations to further security objectives in the commercial aviation ecosystem.