Product Security Analyst (Mid-Senior)

Product Security Analyst (Mid-Senior)

Company:

The Boeing Company

Boeing Defense Space & Security (BDS) is seeking an innovative Product Security Analyst to join our team in Seattle, Washington. In this role, you will lead embedded system cybersecurity and resiliency efforts across the full product lifecycle—from requirements and design through testing, production, and sustainment—ensuring the security of Boeing’s advanced aerospace products and services.

You will collaborate with a multidisciplinary, enterprise-wide Product Security community to develop and implement best practices, tools, and solutions that protect complex systems, including IT, embedded, and non-IT environments. This role offers the opportunity to solve high-impact security challenges, influence next-generation security engineering, and directly contribute to the resilience of Boeing’s commercial and defense offerings.

Ideal candidates bring experience in software and system security, rapid prototyping, and supporting system development, integration, and testing. Strong communication, problem-solving skills, and the ability to work independently and collaboratively with diverse teams and customers are essential.

If you are passionate about advancing cybersecurity in aerospace and want to make a meaningful impact on the future of flight, we encourage you to apply.

Position Responsibilities:

In this position, you will engage in one or more of the following activities:

• Support the development and enhancement of product security requirements and architectures to meet certification and customer requirements.
• Conduct product security risk assessments, attack surface analyses, and vulnerability evaluations for embedded and IT systems.
• Assist in security audits and assessments of applications, components, and subsystems integrated into Boeing products and services.
• Coordinate with governments, customers, suppliers, and industry partners to identify risks and improve security standards and regulatory compliance.
• Analyze and triage product security incidents, identifying attack indicators and escalating potential breaches.
• Perform trend analysis and support the development of detection and mitigation capabilities against evolving threats.
• Prepare and present technical reports and briefings tailored to technical teams and senior leadership.
• Collaborate with cross-functional teams to integrate security practices into the product lifecycle, ensuring a holistic approach to security.
• Stay current with emerging threats, vulnerabilities, and security technologies to continuously improve security posture.
• Support research and development activities that result in innovative solutions to enhance product security.
• Travel to other Boeing sites within the U.S. may be required (estimated to be ~10% travel time).

Differentiators by Level:

• Individual Contributor 3 (IC-3):
  Focuses on researching and analyzing technical data, performing standard risk assessments, and supporting incident coordination. Prepares technical reports and briefings under guidance.
• Individual Contributor 4 (IC-4):
  Leads complex security analyses and incident coordination efforts. Provides technical leadership within teams and presents findings to senior management. Drives improvements in detection capabilities and security integration.
• Individual Contributor 5 (IC-5):
  Acts as a consultant and technical authority on product security integration and risk management. Oversees complex assessments and leads strategic initiatives to advance detection and mitigation capabilities. Communicates technical impacts to senior leadership and influences enterprise security posture.

This position is expected to be 100% onsite.  The selected candidate will be required to work onsite at one of the listed location options.

This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship. An interim and/or final U.S. Secret clearance post-start is required.

Basic Qualifications (Required Skill/Experience):

• Bachelor’s degree in Cybersecurity, or related technical discipline.
• Bachelor’s degree and 5+ years’ experience or Master’s and 3+ years (IC-3); Bachelor’s degree and 9+ years’ experience or Master’s and 7+ years (IC-4); Bachelor’s degree and 14+ years’ experience or Master’s and 12+ years (IC-5)
• 3+ years of experience in product security analysis, risk assessment, vulnerability management, or related fields.
• Must obtain a CompTIA Security+, a CISSP certification or equivalent Cyber Security certification within 6 months of employment in