Product Security Engineer

Product Security Engineer

Company:

The Boeing Company

Boeing Global Services (BGS) is seeking Product Security Engineers at Entry level, Associate Level, and at Mid-Level to join our Central Product Security team. You will help protect government training systems, aircraft support equipment, and related products by providing technical support across the product lifecycle—from requirements and design through sustainment.

Our portfolio includes programs such as P-8A Poseidon, F/A-18 Super Hornets/Growlers, F-15 Eagle, MQ-25 Stingray, T-7A Red Hawk, F-22 Raptor, and V-22 Osprey.

Position Responsibilities

• Develop and refine system requirements and architectures to meet certification and customer security needs.

• Collaborate with internal and external stakeholders—including customers, suppliers, and industry partners—to identify and mitigate security risks.

• Provide recommendations to enhance industry and regulatory security standards.

• Advise customers on product security, certification processes, and impacts of modifications.

• Integrate security practices across the product lifecycle in partnership with cross-functional teams.

• Conduct security assessments, audits, threat and risk analyses, and recommend mitigations.

• Build and evaluate network and software system architectures.

• Support cyber test activities, including tabletop exercises.

• Assess software assurance activities to ensure secure software pedigree.

• Identify assets and evaluate risks, threats, and vulnerabilities in accordance with industry and government standards.

• Ensure designs uphold integrity, availability, confidentiality, and non-repudiation.

• Implement security controls aligned with JSIG, DoD RMF, NISPOM, and other relevant policies.

• Work independently with minimal direction (Level 3) or under guidance (Levels 1-2).

PLEASE NOTE THIS IS NOT AN ANALYST ROLE. THIS IS A CYBER SECURITY ENGINEER ROLE. PLEASE REVIEW

 

Basic Qualifications (Required Skills/Experience):

• Bachelor’s degree in engineering, engineering technology, chemistry, physics, mathematics, or computer science from an accredited institution. YOU MUST HAVE A STEM DEGREE TO BE CONSIDERED

• Education/Experience:

• • Entry Level: Bachelor’s w/0 to 2 years cybersecurity/product security experience.

  • Associate Level: Bachelor’s 2+years or Master’s w/0 to 2 years of cybersecurity/product security experience.

  • Mid-Level: Bachelor’s with 5+ years or Master’s with 3+ years of cybersecurity/product security experience

• DoD 8570 Level II Certification (e.g., CompTIA Security+, CySA+). For Associate & Mid Levels

• Experience or knowledge in product security or cybersecurity concepts scaled to level.

• 3+ years developing cybersecurity philosophies, secure architectures, and requirements (Associate & Mid-Level).

• Experience coordinating and presenting technical content and preparing documentation.

• Knowledge of cybersecurity incident response protocols.

• Experience with Risk Management Framework (RMF) processes and NIST/DoD standards.

Preferred Qualifications (Desired Skills/Experience):

• Experience with vulnerability scanning, mitigation, and administration on Windows (XP, 7, 10), Linux, and Oracle Solaris.

• Product cybersecurity experience in avionics systems and component-level development.

• Familiarity with DevSecOps principles.

• Understanding of Concept of Operations, requirements, and use-case development.

• Experience in risk assessment, threat modeling, and v