Offensive Cybersecurity Test Engineer (Associate, Experienced, or Lead)

Offensive Cybersecurity Test Engineer (Associate, Experienced, or Lead)

Company:

The Boeing Company

The Boeing Company is seeking Offensive Cybersecurity Test Engineers to support the Boeing Test & Evaluation (BT&E) cyber test capability. The selected applicant will join a highly technical Test & Evaluation team building an offensive cyber test capability in Berkeley, MO.

 

This position will be providing testing services to Boeing Defense Space & Security (BDS) portfolio. The primary responsibilities will include Product Security (Cyber) test planning, integration, and execution, mission-based risk assessments, vulnerability assessments, and penetration tests. The selected applicant will become a Berkeley team member trained across the broader BT&E Product Security Capability team.

Our teams are currently hiring for a broad range of experience levels including Associate, Experienced and Lead level Offensive Cybersecurity Test Engineers.

Position Responsibilities:

• Execute penetration tests to identify, exploit, and assess a target system’s vulnerabilities in a threat-representative manner on embedded systems and IP-based networks

• Implement test campaigns aligned with the DoD Cybersecurity T&E best practices

• Conduct Mission Based Cyber Risk Assessments (MBCRAs) and Cyber Table Tops (CTTs)

• Define cyber test plans and schedules for complex architectures and translate to actionable tasks

• Perform event planning in coordination with multiple stakeholders

• Provide team leadership, direction, and coordination resulting in test readiness

• Align technical test findings to stakeholder objectives and map attack surface coverage

• Coordinate prioritization and completion of test cases in accordance with the test plan

• Complete post-test reporting as a part of the test team

• Represent Product Security T&E in engagements with Boeing, suppliers and customer leadership

• Develop and mature Product Security T&E processes, best practices, and solutions

• Occasional domestic and international travel as needed

 

Basic Qualifications (Required Skills/Experience):

• Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science

• 3+ years of experience directing and executing projects in accordance with stakeholder objectives and schedules

• 1+ years of experience working with Department of Defense (DoD) organizations, projects and/or programs

• 1+ years of experience in product security, cybersecurity research, or a related field

• 1+ years of experience planning and executing penetration testing of either IT based systems or Avionics embedded systems

• Experience in system and software architectures

• Able to travel both domestically and internationally

 

Preferred Qualifications (Desired Skills/Experience):

• Level 3: 3 or more years' related work experience or an equivalent combination of education and experience

• Level 4: 5 or more years' related work experience or an equivalent combination of education and experience

• Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle

• Experience hosting events like Cyber Table Tops and Mission Based Cyber Risk Assessments

• Experience working with stakeholders to integrate, plan and execute test events

• Demonstrated ability to engage with stakeholders to define/plan/resource/deliver solutions (state years of experience)

• Experience working with Product Security (non-IT) Cyber Compliance and/or Avionics Embedded systems risk management assessment

• Experience supporting Cyber Table Top, Mission Based Cyber Risk Assessment, or equivalent exercises

• Experience evaluating cybersecurity in one or more of the following domains: Windows, Linux, VxWorks, and INTEGRITY Operating Systems; IP-Based Networks;