Software Security Engineer (Associate or Mid-Level)

Software Security Engineer (Associate or Mid-Level)

Company:

The Boeing Company

The Boeing Company is looking for a Software Security Engineer to join the Enterprise Product Security Software organization in Berkeley or Hazelwood, MO, to support Secure Coding, Secure Engineering Environments, and Software Assurance across various efforts within Boeing Defense, Space, and Security (BDS). Our teams are currently hiring for a broad range of experience levels including Associate and Mid-Level Software Security Engineers.

The successful candidate will be responsible for driving the development, implementation, and sustainment of product security and resiliency throughout the engineering lifecycle, protecting our commercial and military airplanes’ products and the aviation ecosystem.

As a member of the Enterprise Product Security Software organization, you will have support from security experts across all business units, and exposure to a large variety of products and services. With a focus on Software Security, you will be accountable for the security of software products and pipelines across the world's leading portfolio of commercial and defense airplanes, satellites and weapons.

Position Responsibilities:

• Assess the adversity faced by software subsystems in the context of the larger system

• Secure cloud-based software development environments

• Manage risk in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance

• Develop security requirements and coordinate with multiple system stakeholders to identify and properly implement and verify security measures to mitigate the risks, threats and vulnerabilities

• Perform requirements verification on software security engineering products using inspection, analysis, demonstration, and test methods

• Implement Secure Software distribution systems for embedded platforms

• Deploy DevSecOps best practices into Program pipelines, including tool selection, configuration, and analysis

• Provide technical data and develop documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery

• Support Product Security Incident Response Team to respond to security events

• Define and deploy consistent software security standards within the Software Development Lifecycle

• Identify improvements to ensure software implementation is aligned to industry and Boeing software assurance best practices

A successful Associate candidate would have the following:

• Technical Contributions: Apply foundational software engineering and cybersecurity knowledge to assigned tasks such as secure coding reviews, vulnerability scans, and basic requirements verification

• Learning & Growth: Eagerly learn Boeing’s secure development lifecycle, toolchains, and processes, seeking guidance from senior engineers and applying lessons quickly

• Execution: Deliver assigned work on time and with quality, asking the right questions when encountering new tools or security challenges

• Collaboration: Work effectively in small teams, contributing to shared deliverables and actively participating in design and review discussions

• Problem-Solving: Identify straightforward technical issues, propose solutions, and escalate appropriately when complexity increases

A successful Mid-Level candidate would have the following:

• Independence: Take ownership of moderately complex projects, completing assignments with limited oversight while adhering to security standards

• Technical Depth: Analyze and mitigate security vulnerabilities in software pipelines and cloud environments; implement improvements to DevSecOps practices

• Mentorship: Provide guidance and peer reviews for junior engineers, helping them adopt best practices and grow their technical skills

• Cross-Functional Collaboration: Partner with systems engineers, developers, and program managers to integrate security controls into system architectures and Agile workflows

• Judgment & Risk Management: Assess risk tradeoffs and recommend pragmatic solutions that balance security, cost, and performance

• Process Improvement: Identify recurring issues in secure software practices and propose process/tool enhancements to increase resiliency

This position is expected to be 100% onsite. The selected candidate will be required to wo