Software Security Engineer, Experienced or Senior (Virtual)

Boeing • Orlando, FL

3d • Remote

About The Position

Software Security Engineer, Experienced or Senior (Virtual) Company: The Boeing Company The Boeing Company is currently seeking S oftware Security Engineer, (Experienced or Senior) (Virtual) to support our Open Sourc e Progr am Office l o cated in Orlando, Florida (Virtual) . This position will focus on supporting the Products and Capabilities team . The Open Source Program Office ’s mission is to champion open-source engagement across the enterprise and deliver a world class open-source management experience with flawless compliance. T o fulfill that mission, we are looking for a Software Security Engineer to evaluate and mitigate security risks within the enterprise’s use and contribution of open-source software, perform product security risk, vulnerability analyses, and security audits . The individual selected will also be automating security assessments and translating the Chief Engineer's strategic security analysis (risk assessments, policy definitions) into automated and integrated open-source security practices for the rest of the company. This position has been identified as a virtual opportunity and will not require the selected candidate to relocate .

Requirements

• 1+ year s’ experience with software licensing and knowledge of issues with the use of third party and open-source software
• 2+ years’ e xperience in the application of software cybersecurity principles and techniques
• 3+ years ’ experience in software development lifecycle
• Ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship
• Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science

Nice To Haves

• Ability to independently make and execute Software product level licensing decisions
• Ability to interact effectively with Legal, Ethics, and Program Management
• Previous experience performing license assessments and working licensing issues
• Excellent communication skills, both verbal and written

Responsibilities

• Operationalize the open-source policy and process through automation
• Independently investigate, analyze, and resolve licensing issues, driving for business-based outcomes
• Automate Software Composition Analysis (SCA) through a combination of COTS, open source, and in-house tooling.
• Conduct trade studies and work with Product Owners to meet requirements for a broad range of stakeholders
• Manage the configuration and output of dependency scanners, triage critical open-source software vulnerabilities, and ensure timely remediation with development teams.
• Translate approved legal/license policies into code-based checks and automated tooling to prevent incompatible license usage in new projects.
• Engineer and maintain security and license scanning tools; enforce compliance by ensuring automated build failures upon policy violation
• Document all automated processes and serve as the technical liaison, transferring security analysis into scalable, repeatable engineering practices across the enterprise
• Collaborate with the Product Owner on the backlog and technical roadmap
• Seek out additional automation opportunities
• Track and improve KPIs

Benefits

• Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
• The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees