Product Security Analyst (Mid-level or Senior)

Product Security Analyst (Mid-level or Senior)

Company:

The Boeing Company

 Boeing Defense Space & Security (BDS) is seeking an Experienced Product Security Analyst to support the P-8A program in Richardson, TX.

The candidate will join a team supporting product cybersecurity efforts across multiple systems and labs for both training and development efforts. The BDS Product Security Engineering team is responsible for the cybersecurity and resiliency of Boeing products and services, bridging the gap between high level security policies/requirements and technical/operational implementation of those requirements.  The work is multi-disciplinary and includes activities in cyber and systems security analysis, engineering, test, and vulnerability assessments and mitigation.

At Boeing, we innovate and collaborate to make the world a better place. By joining our team, you will become an integral part of an organization that deeply values teamwork, fosters creativity, and upholds the highest standards of engineering technical excellence to ensure our products are secure.  Contribute to work that matters with a company where diversity, equity and inclusion are shared values.  Find your future with us!

Position Responsibilities:

 

• Analyze customer and regulatory information system security requirements and decompose them into system security design specifications.

• Interface directly with the customers and engineers to ensure that security requirements are designed into the products and evaluated for effectiveness.

• Perform as the key system security focal throughout the DevSecOps framework.

• Develop IT architecture deliverables, specific to information security countermeasure implementations, for operational systems and systems under development.

• Provide technical cyber security guidance to IT Administrators, Systems Architect, Systems Engineers, and Software Developers.

• Provide system security guidance on the design and implementation of technical policies for user/computer groups and network devices.

• Responsible for the design and implementation of security systems across the entire organization's networks, including IDS, firewalls, log capture, host-based protections, vulnerability scanning tools, and more.

• Conduct assessments of existing IT architecture for compliance with security requirements from applicable security frameworks.

• Analyzes, triages, aggregates, escalates, and reports relevant product security and anti-tamper data and other information sources for attack indicators and potential security breaches.

• Provide ISSO and IT administrators with system security level expertise to assist with the gathering/securing of data to support incident investigation and response.

• Assist ISSO in monitoring, interpreting, and reacting to security device outputs, create documentation in support of authorization/accreditation packages, and deploy security policies, standards, and guidance.

Willingness to travel 25% to client site.

This position is expected to be 100% onsite. The selected candidate will be required to work onsite at the listed location.

Pre-Hire: This position requires an active U.S. Top Secret Security Clearance (US Citizenship Required, i.e. A U.S. Security Clearance that has been active in the past 24 months is considered active.)

Post-Hire: This position requires the ability to obtain and retain Special Access Program (SAP) approval within a reasonable period of time determined by the company to meet its business needs.

 

Basic Qualifications (Required Skills & Experience): 

• Bachelor’s degree or higher in a technical field

• 5+ years’ software testing and software verification  

• Active CompTIA Security+ certified (or similar certification meeting DoD Directive 8570.01 Certification Requirements)

• 1+ years’ experience working with Information Assurance Policy & RMF

• 1+ years’ experience with security and vulnerability scanning tools such as ACAS/Nessus, STIG's, and SCC

• 1+ years’ experience working in complex test planning, development, and execution

Preferred Qualifications (Desired Skills/Experience):

• DoD 8570.01-M IAT Level III Certification (e.g., CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP); and IASAE Level II (e.g., CASP+ CE, CISSP (or Associate), CSSLP)

• Experience acting as a Test Engineer or Software Assurance Engineer.

• Experience with sof