Graduate Product Security Engineer

Graduate Product Security Engineer

Company:
Boeing Defence United Kingdom Limited

We’re looking for a Graduate Product Security Engineer to join our growing team in Bristol and help shape the future of integrating security and resiliency across our products and services. Product security engineering is a cross‑cutting function and a critical element of designing, delivering, and maintaining Boeing products and services. Our mission is to influence designs and implement security solutions that protect product integrity.

• Assists with the identification and support of product security requirements and architectures to meet certification and customer requirements.
• Participates in design and build activities to help integrate security features into products and services.
• Applies cybersecurity risk analysis techniques and supports threat assessments by collecting and documenting likelihood, impact, and mitigation information.
• Contributes to security assessments and audits to help identify vulnerabilities and recommend mitigations.
• Supports integration of security practices across the product life cycle through collaboration with cross‑functional teams.
• Communicates product security implications to internal stakeholders.
• Supports Senior PSEs in coordinating activities with governments, customers, suppliers, and industry to identify risks and help improve program and interfacing‑system security standards and requirements.
• Gathers and applies cyber threat intelligence findings to inform product security activities.
• Participates in research and development tasks aligned to PSE goals and objectives and assists with basic R&D activities.
• Performs assigned system analysis and trade studies to help define technical concepts and proposed security solutions.
• Helps develop and improve tools, processes, and efficiencies to increase team productivity.
• Participates in program boards and reviews: collects data, prepares briefings, documents action items, and facilitates cross‑team collaboration.
• Monitors emerging threats, vulnerabilities, and security technologies and reports findings to the team to improve product security posture.
• Assists with ensuring security of equipment, tools, data, networks, and resources used for product design, development, build, test, storage, delivery, operations, and support.
• Responds to assigned security‑related requests and documents outcomes for review by senior engineers.
• Supports advisement activities by assisting with preparation of materials that describe security and certification considerations for customers, including potential consequences of modifying products and services.

• Ability to obtain UK Security Clearance.
• Hands‑on coursework, internships, or practical experience in:
• Cybersecurity and security risk / threat assessment
• Security design and analysis
• Network security architecture
• Embedded systems security and cyber‑physical systems
• Systems hardening and security control implementation
• Cryptography and PKI
• Security testing and evaluation
• Trusted computing & anti‑tamper engineering
• Aircraft communications standards & protocols (ARINC 400, 600, 800 series etc.)
• Secure Software Development Lifecycle (SDLC)

• Understanding of Concept of Operations (Con Ops), requirements development, and use‑case definition.
• Exposure to risk assessment and management, including threat modelling and vulnerability analysis for networked and embedded systems.
• Familiarity with cybersecurity audits & investigations and security incident response practices.
• Awareness of malware analysis, attack surface reduction, and security analysis techniques.
• Knowledge or interest in Dev Sec Ops  principles and practices.
• Familiarity with common networking and computing protocols and architectures (TCP/IP, OSI, UDP, serial/parallel communications, bus architectures).
• Understanding of hardware and software integration processes and secure‑by‑design principles.
• Familiarity with relevant standards and frameworks, including RTCA/EUROCAE: DO‑326B/ED‑202B, DO‑356A/ED‑203A, NIST: RMF and SPs 800‑30, 800‑53, 800‑160, ISO/IEC: 27001/27002, 62443, DEFSTAN: 05‑138,…