Cyber A&A Engineer Security Clearance

Position: Cyber A&A Engineer with Security Clearance
Job Description At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. The Boeing Company is seeking a Cyber A&A Engineer in Colorado Springs, CO. Boeing's Missile Defense Program is seeking motivated and talentedprofessionals to join its team supporting the National Team Command, Control, Battle Management and Communications (C2

BMC) Programs & Networks. Missile Defense programs are part of the Ballistic Missile Defense System which defends the United States homeland and its regional allies all over the world. Be a part of our passionate and highly motivated team who are excited to be on the forefront of defense of our nation. Boeing offers a comprehensive benefits package including generous Paid Time Off (PTO), flexible work schedules, paid parental leave for mothers and fathers, 401k matching, tuition assistance for earning advanced degrees, and paid medical leave programs.

Come Join Us and Build the Future!

Position Responsibilities:

* Process and track DD Form 2875 user account forms and required training for privileged and non-privileged accounts, perform annual validation of accounts, and work with system administrator on creation, modification, and removal of accounts

* Perform assessment of systems and networks within a virtual environment and identify where those systems deviate from acceptable configurations, enclave policy, or local policy. This is achieved through passive evaluations such as compliance audits using STIG Viewer, SCAP, etc. and active evaluations such as vulnerability assessments utilizing ACAS.

* Perform Security Technical Implementation Guide (STIG) assessments and hardening for both Windows, Red Hat Enterprise Linux (RHEL) systems, and networking equipment utilizing ConfigOS

* Develop test plans reflecting how STIG checks are implemented and be able to show expected outcomes of those checks

* Update Risk Management Framework (RMF) artifact documentation to ensure system hardening non-compliant is tracked and remediated.

* Establish strict program control processes to ensure mitigation of risks and supports obtaining assessment and authorization of systems. Includes support of process, analysis, coordination, control certification test, compliance documentation, as well as investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.

* Assist in the implementation of the required government policy (i.e., NISPOM, NIST, DoD), making recommendations on process tailoring, participating in and documenting process activities.

* Perform analyses to validate established cybersecurity controls and requirements and to recommend cybersecurity safeguards.

* Support program test milestones through pre-test preparations, participating in the tests, analysis of the results, and preparation of required artifacts supporting authorization.

* Prepare artifacts such as Test Results (TR), Authorization Boundary Diagrams (ABD), Network Topologies, Flow-diagrams, Hardware and Software listings, Ports, Protocols, and Services Management documentation, supporting Assessment and Authorization activities and maintaining the Plan of Actions and Milestones (POA&M).

* Periodically conduct a complete review of each program support and operational system's audits and monitor corrective actions until all actions are closed.

* Coordinate across the program to address identified deficiencies during RMF assessment activities. This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options. (Colorado Springs, CO.) This position may require the ability to obtain access to an MDA facility. Access to the facility requires a background investigation by U.S. government authorities.

This position requires candidate acceptance by industry partner resource control board. This position requires an active Top Secret U.S. Security Clearance. (A U.S. Security Clearance that has been active in the past 24 months is considered active.) Basic Qualifications (Required Skills/Experience):
* Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), computer science, engineering data science, mathematics, physics or chemistry (e.g. Bachelor) and typically 5 or more years' related work experience or an equivalent combination of technical education and experience or non-US equivalent qualifications. In the USA, ABET accreditation is the preferred, although not required, accreditation standard.

* IAT Level II/ IAM Level I DoD 8570 certification (CompTIA Security+ CE or equivalent)

* Security engineering skills with a working knowledge of cybersecurity technology and…