Mid-Level Product Security Engineer

Mid-Level Product Security Engineer

Company:

The Boeing Company

Boeing is seeking an innovative and experienced Mid-Level Product Security Engineer - Avionics Development to join our growing team as part of an integrated Product Security Organization, located in Berkeley, MO, Hazelwood, MO, Saint Louis, MO, Saint Charles, MO.  The successful candidate will be responsible for the development, implementation, and sustainment of product cyber security and resiliency engineering for avionics through requirements, design, analysis, build, test, production, operations, support and sustainment.

You will be a part of Boeing's Product Security Engineering Organization, which is a growing multi-disciplinary cybersecurity engineering organization that is responsible for the cyber security and resiliency of our products, platforms, and services. You will have the opportunity to shape and influence Product Security Engineering within Boeing and engage with Boeing’s Product Security community. Furthermore, your effort will directly inform our Enterprise Product Security Engineering team with lessons learned and technologies, that directly enhances our commercial and defense offerings.

Primary responsibilities:

• Develop and enhance the enterprise OT Vulnerability Management Program to deploy OT aware scanning and patching tooling across targeted OT environments such as production equipment, facilities, and labs
• Lead the development, implementation, and sustainment of product security for Boeing avionics systems, throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle
• Coordinate with platforms and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions
• Coordinate with other engineering stakeholders – systems, software, and hardware – advising on the results of security analysis – to develop secure architectures and designs
• Lead, establish, and integrate standards and processes for product security engineering for avionics development, and to meet applicable program and certification requirements
• Utilize the Risk Engineering digital thread to inform product requirements surrounding cyber survivability against specified cyber threats – by performing criticality, adversity, threat analysis for avionics systems
• Assessing internal customer requirements to derive strategies and detailed security requirements system and technical requirements
• Executing PSE activities – security requirements, architectures, risk assessments
• Documenting PSE activities and delivering PSE artifacts
• Lead risk reduction and technology maturation activities – where appropriate – resulting in innovative solutions in product and services offering
• Identifying and elevating product security risks to the integrated product team(s) and management

Basic Qualifications (Required Skills and Experience):

• Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
• 5+ years of related work experience or an equivalent combination of education and experience
• Understanding of cybersecurity controls, frameworks, and the vulnerability management lifecycle
• Experience in architecture, design, management, administration and troubleshooting of networks with a focus on security controls and firewall administration
• Experience in cyber security and/or product security engineering
• Experience in analysis of customer security requirements and deriving detailed security requirements, architecture & design
• Demonstrated ability to identify new opportunities and engage with stakeholders to define, plan, resource and deliver solutions
• Experience with the development of cybersecurity philosophies, patterns, requirements, secure architectures and designs
• Experience coordinating and presenting technical content to a diverse audience, as well as preparing technical documentation
• Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle – to inform requirements, and design
• Experience generating product cyber security artifacts for customer/certifiers
• Experience with defense security standards (DoDI 8510.01, ICD-503, CNSSI-1253, NIST 800-53) to perform risk analysis and provide strategic direction for system architectures, operations and del