Expert or Senior Cybersecurity Architect (Virtual)

Expert or Senior Cybersecurity Architect (Virtual)

Company:

The Boeing Company

Job ID:

00000414148

Date Posted:

2024-03-13

Location:

USA - Englewood, CO

Job Description Qualifications:

Why Choose Boeing Digital Aviation (or What We Offer)

At Boeing Digital Aviation Solutions, you’ll be a part of a team that creates innovative digital solutions and analytics that drive the future and evolution of Digital Aviation and enable our customers to transform the way they do business. Using agile digital technology, our solutions optimize all aspects of the flight ecosystem including safety, environmental sustainability, and efficiency – delivering value and protecting our customers and the planet.

Who We Are Looking For

The Boeing Digital Aviation Solutions (DAS) Expert or Senior Cybersecurity Architects (Virtual) must have broad cloud and application security background with experience in leading the definition and implementation of secure architecture and coding best practices for cloud native, customer-facing software solutions. The candidate needs strong technology leadership, analytical skills, teamwork, and excellent communication skills. The candidate will need to communicate at different levels in the organization to other technical personnel, business leaders and customers. This role will drive best-in-class software security practices into the Application Engineering organization in support of DAS modernization efforts to bring market-leading solutions to our aviation customers.

What You Will Do/ Position Responsibilities:

• Develop and lead implementation of security architecture and secure coding standards and strategies for DAS software solutions
• Contribute to the definition of overall DAS architecture security principles, guidelines, patterns, training, and standards
• Drive adoption of DevSecOps practices into the software engineering organization by working directly with teams on implementation
• Provide effective communication to business and technical community on security architecture topics
• Perform security tool evaluations and make recommendations for adoption
• Assess security impact of architectural decisions to product lifecycle
• Lead the identification of design constraints and ensure architecture conforms to security requirements and adopted best practices
• Work across software engineering teams and architects for end-to-end alignment, process improvements and future designs
• Contribute to the standard software artifacts including the Software Architecture Document, Software Architecture models and other standard artifacts
• Work with customers, as needed, to understand their security requirements
• Ensure compliance with Boeing Information Security requirements
• Collaborate with cloud service providers, Boeing Enterprise Security and Boeing Enterprise External Cloud teams to architect best-of-breed application security solutions across multiple clouds
• Review internal and vendor artifacts for security architecture compliance

This position has been identified as a virtual opportunity and will not require the selected candidate to relocate.

Employer will not sponsor applicants for employment visa status.

Basic Qualifications (Required Skills/Experience):

• 5+ years’ experience in IT security, compliance, and risk management, including privacy, controls, etc.
• Bachelor’s degree or higher in related field or equivalent work experience
• Highly technical and analytical, possessing 10 or more years of IT implementation experience.
• Hands-on technical expertise in Security Architecture, automation, integration, and deployment (DevSecOps)
• Strong verbal and written communications skills and ability to influence and lead effectively across organizations
• Proven experience leading a globally distributed team
• Proven experience to research, advise, compare, and recommend technology solutions
• Ability to demonstrate and maintain method of keeping current on new technologies

Preferred Qualifications (Desired Skills/Experience):

• 7+ years’ experience in IT security, compliance, and risk management, including privacy, controls, etc.
• Proven ability to deliver application and infrastructure security solutions in a multi-cloud environment
• Coding/development experience
• DevSecOps automation best practices
• DFARS/FedRAMP/ITAR
• NIST Cybersecurity Framework
• ISO 27001/SOC2
• Security Development Lifecycle
• AWS/Azure/GCP Security services
• Cloud Security monitoring process
• Certificate Management
• Threat modeling
• Dynamic and Static Application