Product Security Engineer (Mid-level or Senior)

Product Security Engineer (Mid-level or Senior)

Company:

The Boeing Company

Boeing Defense Space & Security (BDS) is seeking an Experienced Product Security Engineer to support the P-8A program in Richardson, TX.

The candidate will join a team supporting product cybersecurity efforts across multiple systems and labs for both training and development efforts. The BDS Product Security Engineering team is responsible for the cybersecurity and resiliency of Boeing products and services, bridging the gap between high level security policies/requirements and technical/operational implementation of those requirements.  The work is multi-disciplinary and includes activities in cyber and systems security analysis, engineering, test, and vulnerability assessments and mitigation.

At Boeing, we innovate and collaborate to make the world a better place. By joining our team, you will become an integral part of an organization that deeply values teamwork, fosters creativity, and upholds the highest standards of engineering technical excellence to ensure our products are secure.  Contribute to work that matters with a company where diversity, equity and inclusion are shared values.  Find your future with us!

Position Responsibilities: 

• Develop, implement, and sustain product security and resiliency throughout the full lifecycle: requirements, design, build, test, production, operations, and support.

• Analyze customer and regulatory information system security requirements and decompose them into system security design specifications and verifiable requirements.

• Develop and enhance system requirements and architectures to ensure product security meets all applicable certifications and customer requirements.

• Interface directly with customers, lead engineers, suppliers, and government stakeholders to ensure security requirements are designed into products and evaluated for effectiveness; advise customers on maintaining product security and certification, including the security impacts of product or service modifications.

• Define and identify product security requirements for suppliers of components and subsystems and coordinate their integration into Boeing products and services.

• Work in classified environments to evaluate computing systems, products, and platforms for conformance, generating and analyzing cybersecurity data to support program and customer needs.

• Research, collect, interpret, test, and analyze technical data to support the integration of security and resiliency into products and services across the lifecycle, optimizing security effectiveness in projected operational environments.

• Perform and support product security risk, attack-surface, and vulnerability analyses, and conduct security audits of applications and application stacks of various provenances.

• Analyze, triage, aggregate, escalate, and report relevant product security, anti-tamper, and telemetry/data sources for attack indicators and potential security breaches; correlate findings and perform trend analysis.

• Analyze malware and attacker tactics to improve detection capabilities and inform mitigations. Coordinate and support incident response activities and provide technical analysis to inform containment and remediation.

• Make mitigation recommendations and, where authorized, execute mitigations and coordinate implementation with engineering and program teams.

• Perform software assurance assessments to verify the security pedigree of software solutions and related development activities.

• Ensure security of facilities, equipment, tools, data, networks, and resources used across product design, development, build, test, storage, delivery, operations, and support.

• Provide ISSO and IT administrators with system security expertise to assist in gathering/securing data to support incident investigation and response; assist ISSO in monitoring, interpreting, and reacting to security device outputs.

• Create and maintain documentation in support of authorization/accreditation packages; deploy and enforce security policies, standards, and guidance.

• Develop, maintain, and improve planning, organization, implementation, and monitoring of requirements management processes to ensure traceability and compliance.

• Conduct R&D and analysis activities as needed to produce innovative security solutions and improve industry/regulatory security standards and program requirements.

• Train, mentor, and provide technical leadership to junior staff members.

• Work under minimal direction, exercise sound judgment and techn