Senior Software Security Engineer

Senior Software Security Engineer

Company:

The Boeing Company

The Boeing Company is looking for a Senior Software Security Engineer to join the Enterprise Product Security Software organization in Berkeley or Hazelwood, MO, to support Secure Coding, Secure Engineering Environments, and Software Assurance across various efforts within Boeing Defense, Space, and Security (BDS).

The successful candidate will be responsible for driving the development, implementation, and sustainment of product security and resiliency throughout the engineering lifecycle, protecting our commercial and military airplanes’ products and the aviation ecosystem.

As a member of the Enterprise Product Security Software organization, you will have support from security experts across all business units, and exposure to a large variety of products and services. With a focus on Software Security, you will be accountable for the security of software products and pipelines across the world's leading portfolio of commercial and defense airplanes, satellites and weapons.

Position Responsibilities:

• Assess the adversity faced by software subsystems in the context of the larger system

• Secure cloud-based software development environments

• Manage risk in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance

• Develop security requirements and coordinate with multiple system stakeholders to identify and properly implement and verify security measures to mitigate the risks, threats and vulnerabilities

• Perform requirements verification on software security engineering products using inspection, analysis, demonstration, and test methods

• Implement Secure Software distribution systems for embedded platforms

• Deploy DevSecOps best practices into Program pipelines, including tool selection, configuration, and analysis

• Provide technical data and develop documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery

• Support Product Security Incident Response Team to respond to security events

• Define and deploy consistent software security standards within the Software Development Lifecycle

• Identify improvements to ensure software implementation is aligned to industry and Boeing software assurance best practices

A successful candidate would have the following:

• Leadership & Vision: Serve as a technical leader across multiple programs, setting the direction for secure software development practices and aligning them with enterprise standards

• Subject Matter Expertise: Be recognized as a go-to expert for secure software development, DevSecOps, and product resiliency, able to influence designs from concept through sustainment

• Strategic Impact: Shape and define Boeing’s software security roadmap, influencing tool adoption, frameworks, and compliance with DoD and industry standards

• Mentorship & Development: Coach engineers at all levels, building organizational expertise and fostering a culture of security-first thinking

• Complex Problem-Solving: Address high-impact vulnerabilities, system-wide risks, or enterprise-level incidents with innovative solutions

• External Engagement: Represent Boeing in discussions with regulators, partners, and industry groups; publish or present thought leadership in software security

• Change Agent: Drive adoption of new methodologies and tools, ensuring Boeing remains on the leading edge of secure software engineering practices

This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options.

Basic Qualifications (Required Skills/Experience):

• Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science

• Ability to work well with a geographically dispersed cross-functional and matrix team Software Development Background, or other experience with DevSecOps CI/CD Pipelines

• 2+ years of experience leading a team and/or technical project

• 8+ years of work-related experience in Cybersecurity

Preferred Qualifications (Desired Skills/Experience):

• Experience with Secure Software Distribution; Certificates; PKI; HSM; etc.