Senior Vulnerability Management & Application Security Versatilist

Senior Vulnerability Management & Application Security Versatilist

Company:

The Boeing Company

The Boeing Company is currently seeking a Senior Vulnerability Management & Application Security Versatilist to join the team in Kent, WA; North Charleston, SC; El Segundo, CA; Hazelwood, MO; Mesa, AZ; or Plano, TX. 

Join our team where you will strengthen Boeing’s Information Technology (IT) and cloud ecosystems by leading and innovating Vulnerability Management & Application Security process, tools, automation and analytics.

You will provide risk-reduction guidance to key partners, build executive-level dashboards, and implement automation and advanced analytics to identify, prioritize, and remediate vulnerabilities across applications and infrastructure hosted in cloud and on-prem environments.

This role partners closely with Enterprise Security (BES), IT, and risk teams to drive risk-based remediation and improve operational security posture.

Position Responsibilities:

• Lead development and innovation of vulnerability management & Application Security processes, tooling, automation and analytics

• Leverage dashboards, and visualizations to identify, prioritize, and communicate risks across cloud and on-prem IT infrastructure and applications

• Provide application and infrastructure support guidance to ensure remediation actions are executable and aligned with system stability and change processes

• Collaborate with BES, IT, DevSecOps, application owners, and risk teams to define remediation plans, Service Level Agreements (SLAs), and mitigation strategies for high-risk findings

• Lead and manage complex analytics projects, including automation of ingestion, correlation, scoring, and reporting pipelines

• Serve as a liaison to inspire, motivate, and guide cross-functional teams and business leaders in meeting security objectives

• Maintain awareness of emerging vulnerabilities, exploitation trends, cloud security risks, and relevant security standards and frameworks

• Contribute to playbooks, runbooks, and operational procedures for vulnerability triage, mitigation, and infrastructure change coordination

Basic Qualifications (Required Skills/Experience):

• 5+ years of experience working with Tableau

• 5+ years of experience coding in SQL, Python, Java, or R

• 5+ years of experience preparing and presenting to executives, senior leadership, and external customers

• 5+ years of experience leading through influence and partnering with cross-functional teams on projects, transactions or initiatives

• 3+ years of experience in vulnerability management, risk assessment, and/or security analytics

• Experience with vulnerability scanning tools and formats (e.g., Nessus, Qualys, Tenable, Rapid7, Snyk, Veracode, or Burp)

• Experience integrating threat intelligence and vulnerability data to prioritize remediation

Preferred Qualifications (Desired Skills/Experience):

• Bachelor’s degree or higher

• Current cybersecurity certification (e.g., Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor ​(CISA))

• 5+ years of experience working with stakeholders across multiple levels and functions

• Experience with vulnerability risk rating methodologies and CISA Stakeholder-Specific Vulnerability Categorization (SSVC)

• Experience with cloud environments and cloud-native vulnerability management (Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP))

• Experience identifying complex vulnerability issues, analyzing data, and implementing automation or process changes to improve operational efficiency

• Experience with cybersecurity frameworks and regulations (e.g., National Institute of Standards and Technology (NIST), ISO 27001)

• Experience with DevSecOps toolchains, Infrastructure as Code (IaC) security scanning, and container security

• Experience with vulnerability and container scanners (e.g., Rapid7, Nessus, Qualys, Tenable, Trivy, Clair)

• Experience with application security including SAST/DAST tools (e.g., Coverity, NetSparker, Veracode, Checkmarx, Burp), and SBOM familiarity

• Experience with Cloud security tooling and APIs (AWS/Azure/GCP native and 3rd-party)

• Experience with Data pipelines & automation including Python, SQL, Airflow, Elastic Stack, Splunk, REST Applicat