Product Security Engineering

Product Security Engineering 2 (Contract)

Contract (1 year)

Published 2 days ago

This posting is for a contract assignment and is not a full-time employment offer with Boeing. Candidates selected for roles will be employed as contract workers through a Boeing approved 3rd party for the duration of the specified project.

Regular and predictable attendance is required.

The Boeing Defense, Space & Security (BDS) Command and Control, Battle Management, and Communications (C2

BMC) National Team Program is looking for a Network Engineer to join the team in Colorado Springs, CO to support the Ballistic Missile Defense System (BMDS).

The Boeing Missile Defense Programs support the Missile Defense Agency's (MDA) mission to develop and deploy a layered Missile Defense System to defend the United States, its deployed forces, allies, and friends from missile attacks in all phases of flight. Be a part of our passionate and highly-motivated team who are excited to be on the forefront of defense of our nation.

• The candidate will partner directly with the Cyber Engineering organization to embed and validate cybersecurity solutions on the C2
  
  BMC platform at COS HWY-83, ensuring that all security controls are correctly implemented and fully tested.
• They will serve as the primary liaison with the Cyber Test Facility (CTF) at MIDOC, where they will coordinate test events, validate test plans submitted by cyber teams, and will be required to brief program leadership on their analysis of the test plan while assisting the teams in identifying the specific cyber requirements needed for successful execution.
• In addition, the role supports cyber teams by facilitating the timely delivery of capabilities and solutions while maintaining a strong focus on vulnerability management.
• Responsibilities include end-to-end handling of Information Assurance Vulnerability Management (IAVM) tickets, Cyber Tasking Orders (CTO), Common Vulnerabilities and Exposures (CVE) remediation, vendor-issued patch integration, and the application and verification of DISA STIG configurations.

• Generally has 3+ years of related experience and may have a post-secondary degree or training in a related discipline.
• Must have an active full secret DoD Secret security clearance, at start.
• Must have a DoD 8140 IAT-Level II certification (e.g., Security+ or higher), at start.
• The position requires a strong working knowledge of cyber capabilities—including patch management, multi-factor authentication, host-based security, intrusion detection, security event management, active/passive system scanning, and defense-in-depth.
• Must possess a strong working knowledge of core cyber capabilities—including patch management, Group Policy Object (GPO) management, and proven remediation techniques for addressing cybersecurity vulnerabilities and threats—as well as security-engineering expertise in Information Assurance (IA) technologies, NIST standards, DoDI
  8500.2, and Risk Management Framework (RMF) security controls.
• The candidate must have hands-on experience throughout the Agile development lifecycle, specifically using the Scrum framework—identifying requirements, defining user stories, and participating in sprint planning, daily stand-ups, and sprint reviews.
• In this role, the individual will review test plans and test cases supplied by development teams, verify that they are correctly implemented, execute the tests, and provide clear, actionable feedback to ensure compliance with cyber security requirements.
• Experience configuring cyber audit tools, performing cyber vulnerability assessments, and handling configuration activities is also required.
• A solid understanding of Software Development Life Cycle (SDLC) models and…