Senior Product Security Engineer - Avionics Development Job Berkeley area,Missouri USA,Engineering

At Boeing, we innovate and collaborate to make the world a better place. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

Boeing is seeking an innovative and experienced Senior Product Security Engineer – Avionics Development to join our growing team as part of an integrated Product Security Organization, located in Berkeley, MO, Hazelwood, MO, Saint Louis, MO, Saint Charles, MO, Arlington, VA, and Herndon, VA. The successful candidate will be responsible for the development, implementation, and sustainment of product cyber security and resiliency engineering for avionics through requirements, design, analysis, build, test, production, operations, support and sustainment.

Primary

responsibilities

Lead the development, implementation, and sustainment of product security for Boeing avionics systems throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle.
Coordinate with platforms and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions.
Coordinate with other engineering stakeholders – systems, software, and hardware – advising on the results of security analysis to develop secure architectures and designs.
Lead, establish, and integrate standards and processes for product security engineering for avionics development, and meet applicable program and certification requirements.
Utilize the Risk Engineering digital thread to inform product requirements surrounding cyber survivability against specified cyber threats by performing criticality, adversity, threat analysis for avionics systems.
Assess internal customer requirements to derive strategies and detailed security requirements system and technical requirements.
Execute PSE activities – security requirements, architectures, risk assessments.
Document PSE activities and deliver PSE artifacts.
Lead risk reduction and technology maturation activities resulting in innovative solutions in product and services offering.
Identify and elevate product security risks to integrated product team(s) and management.

This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed locations.

Basic Qualifications

Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement.
9+ years of related work experience or an equivalent combination of education and experience.
Experience with commercial and/or military aircraft avionics.
Experience in deriving technical requirements from customer input or eliciting customer requirements.
Experience solving complex business problems and delivering solutions via technology.
Experience presenting technical briefings to various audiences.
Knowledge of security practices and principles associated with risk analysis and assessment.

Preferred Qualifications

Active technical security certification (e.g., ISC2 – International Information System Security Certification, CISSP – Certified Information Systems Security Professional, GIAC – Global Information Assurance Certification).
Experience designing, supporting, or executing AI, data, privacy, cybersecurity, or other technology risk assessments and translating findings into practical controls and process improvements.
Experience in security domain, e.g., defining penetration testing, architecting product security posture.
Experience working with and/or developing embedded systems.
Experience in the field of Cybersecurity, anti-tamper and/or secure computing and knowledge of Department of Defense (DoD) policies and requirements related to Cybersecurity.
Experience in combination of test planning and execution experience including Cyber Test and Evaluation activities such as penetration testing, threat, adversity and risk analysis, and exploitation tool development, tailoring, and use and general cybersecurity engineering.
Active…