Associate or Experienced Product Security Engineer

Associate or Experienced Product Security Engineer

Company:

The Boeing Company

Boeing Engineering is actively seeking an Associate (Level 2) or Experienced (Level 3) Product Security Engineer to join our growing Factory & Operational Technology (OT) Product Security Engineering (PSE) team in Everett, WA or Seattle, WA. This role offers a rare opportunity to work at the forefront of efforts to ensure that our factories, producing products ranging from commercial airplanes, to satellites, to autonomous submersibles, continue to be secure and resilient from cyber threats.  Our manufacturing systems—assembly robots, CNC machines, and industrial control systems—along with the buildings that house them, demand rigorous cybersecurity defenses to prevent disruption and compromise.

In this role, you will be improving the security posture of Boeing’s production environments by designing, validating, and deploying centralized network monitoring, vulnerability management, and logging capabilities that span our factories across the globe.  You’ll turn telemetry into high‑confidence detections, dashboards, and key performance indicators (KPI) that feed security operation centers (SOCs), incident response (IR), and forensics workflows. From policy, architecture, and non‑disruptive pilot validation in labs/digital twins to tool selection and enterprise rollout you’ll play a key role in partnering with manufacturing, IT, safety, and vendors to enable faster investigations, prioritized remediation, preserved uptime, and a measurable improvement in the resilience of our manufacturing operations.

Whether you're passionate about strengthening operational technology security, applying hands‑on technical expertise to protect complex manufacturing environments, or seeking a leadership‑oriented engineering role, this position offers both impact and visibility in a highly specialized domain. Join us and help lead the charge in securing the systems and environments that produce our industry leading products.

Primary responsibilities:

• Develop and enhance the enterprise OT Monitoring Program to deliver safe, non-disruptive, and reliable cybersecurity visibility across networks and systems.
• Evaluate, pilot, validate, and deploy cybersecurity monitoring and logging toolchains
• Build and maintain parsers, normalizers, protocol dissectors, and custom extractors to ensure high‑fidelity telemetry, reliable context enrichment, and interoperability with SOC tooling.
• Facilitate detection engineering through the baselining of OT network behavior, developing analytics and detection rules for OT protocols, tuning alerts to reduce false positives, and performing proactive threat hunting across OT telemetry.
• Design and implement security dashboards, reporting, and KPIs that serve both operations and security stakeholders (latency/visibility metrics, detection quality, mean time to detect/respond, sensor health, coverage, etc).
• Define and publish OT monitoring and log‑collection policies covering collection scope, retention, access controls, privacy, rules of engagement, and compliance requirements.
• Create and maintain playbooks, training materials, and handover packages for SOC analysts, site focals, IR responders, and operations teams. Lead training sessions and tabletop exercises.
• Coordinate with cross functional stakeholders (manufacturing, IT, safety, vendors) to minimize operational impact, track program metrics and continuously improve.
• Support incident response (IR) and root‑cause analysis for OT security events, including coordination with the IR team, safety, and operations teams.
• Mentor junior engineers and participate in cross‑functional design reviews.
• Contribute to roadmaps, budget justification, and vendor evaluations to evolve the OT monitoring and centralized logging capability.

Basic Qualifications (Required Skills and Experience):

• Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science
• Level 2: 2+ years of related work experience or an equivalent combination of education and experience
• Level 3: 5+ years of related work experience or an equivalent combination of education and experience
• Deep understanding of cybersecurity controls and frameworks
• Hands‑on experience designing, deploying, and managing centralized cybersecurity monitoring and logging solutions
• Working knowledge of a source control tool such as GIT, Subversion, CVS, etc.
• Familiarity with cloud logging/secur