Senior Product Security Engineer

Senior Product Security Engineer – Boeing

The Senior Product Security Engineer provides technical support for product cyber security and resiliency engineering for embedded systems within Boeing’s Air Dominance & Phantom Works portfolio.

• Support the development, implementation, and sustainment of product security requirements for Air Dominance & Phantom Works avionics systems and subsystems throughout the lifecycle.
• Coordinate with partners and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions.
• Collaborate with systems, software, and hardware engineering stakeholders, advising on the results of security analysis to develop secure architectures and designs.
• Lead the establishment and integration of standards and processes for product security engineering in embedded avionics development, meeting applicable program and certification requirements.
• Utilize the Risk Engineering digital thread to inform product requirements related to cyber survivability, performing criticality, adversity, and threat analysis for avionics systems.
• Lead risk-reduction and technology-maturation activities, delivering innovative solutions in product and services.
• Implement security controls and requirements per JSIG, DoD and ICD 503 RMF, NISPOM, or DoD Overprint.
• Provide inputs for planning, scheduling, risk, issue, and opportunity activities for cyber security.
• Build and lead cross-functional teams, motivating team members and fostering daily engagement.

Travel is required up to 10%. The position is 100% onsite at the specified location.

• Active Secret U.S. Security Clearance (interim or final) required post-start.
• Certification such as CompTIA Security+ or CISSP may be required to comply with contract requirements.

• Senior (Level
  4) educational background from an accredited engineering, engineering technology, computer science, data science, mathematics, physics or chemistry program; typically 9+ years of related work experience or equivalent combination.
• Preferred ABET accreditation (but not required).
• Experience developing avionics computer systems.
• Experience performing security risk assessments and risk management within networked operational technology (OT).
• Experience in embedded software architecture, agile development, software development lifecycle, application testing, and security tools/practices used in development pipelines.
• Demonstrated ability to identify opportunities and engage stakeholders to define, plan, resource, and deliver solutions.
• Experience developing cybersecurity philosophies, patterns, requirements, and secure architecture designs.
• Experience coordinating and presenting technical content to diverse audiences and preparing technical documentation.
• Ability to work autonomously.
• Knowledge of cybersecurity incident response protocols, including impact assessment, containment, remediation, evidence handling, and technical reporting.

• Experience in product cyber security for avionics systems and component-level development.
• Experience performing adversity (threat) analysis and maturing the analysis through the development lifecycle to inform requirements and design.
• Experience generating product cyber security artifacts for customers and certifiers.
• Security certifications such as CISSP or equivalent are desired.
• Applied knowledge of security airworthiness processes (e.g., DO-326A, DO-356A) for avionics systems.
• Applied knowledge of complex safety-critical systems development methodologies (e.g., DO-178C, DO-254).

Senior-Level (Level
4) pay range: $162,350 - $219,650 annually. Competitive base pay, variable compensation opportunities, health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance, paid and unpaid time off, and other benefits. Relocation assistance is available to eligible candidates.

Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, disability, genetic factors, military/veteran status, or other characteristics protected by law.