Senior Offensive Cybersecurity Test Analyst

Senior Offensive Cybersecurity Test Analyst

The Boeing Company

The Boeing Company is seeking a Senior Offensive Cybersecurity Test Analyst to support the Boeing Test & Evaluation (BT&E) cyber test capability. The selected applicant will join a highly technical Test & Evaluation team building an offensive cyber test capability in Berkeley, MO
.

This position will be providing testing services to Boeing Defense Space & Security (BDS) portfolio. The primary responsibilities will include Product Security (Cyber) test planning, integration, and execution, mission-based risk assessments, vulnerability assessments, and penetration tests.

The selected applicant will become a Berkeley team member trained across the broader BT&E Product Security Capability team.

• Lead execution of penetration tests to identify, exploit, and assess a target system’s vulnerabilities in a threat-representative manner on embedded systems and IP-based networks
• Subject Matter Expert for emulating advanced cyber adversary (advanced persistent threats) tactics, techniques and procedures (TTPs)
• Lead controlled attack simulations that test the effectiveness of a blue team and its capabilities to detect, block, and mitigate attacks and breaches
• Develop exploits and malware targeting modern operating systems and defenses
• Communicate recommendations for improvements to customer stakeholders via reports or presentations using common frameworks such as MITRE ATT&CK, Cyber Kill Chain, etc.
• Participate in test design and planning
• Occasional domestic and international travel as needed

This position is expected to be 100% onsite. The selected candidate will be required to work onsite in Berkeley, MO.

• Active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
• 5+ years of experience planning and executing penetration testing of either IT based systems or Avionics embedded systems
• 5+ years of experience in product security, cybersecurity research, or a related field
• 3+ years of experience leading and mentoring a technical team
• 2+ years of experience leading projects or engineering teams
• Able to travel both domestically and internationally

• Active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
• Demonstrated ability to engage with stakeholders to define/plan/resource/deliver
• Experience designing and/or testing product systems
• Experience facilitating and/or supporting Cyber Table Top, Mission Based Cyber Risk Assessment, or equivalent exercises
• Experience planning and executing penetration tests in one or more of the following domains:
  • Windows, Linux, VxWorks, and INTEGRITY Operating Systems
  • IP-Based Networks
  • Avionics, Embedded Systems, Non-Standard Ethernet Protocols (ARINC, MIL-STD)
  • RF interfaces
• Experience coordinating and presenting technical content to a diverse audience
• Experience with program planning (cost and schedule)
• Experience with scripting languages such as Bash, Python, Power Shell
• One or more of the following
  
  Certifications:
  • Offensive Security Certified Engineer (OSCE)
  • Offensive Security Certified Professional (OSCP)
  • GIAC Certified Exploit Researcher and Advanced Penetration Testers (GXPN)
  • GIAC Reverse Engineering Malware (GREM)
  • Certified Information System Security Professional (CISSP)

Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process.

Boeingis a Drug Free Workplace where post offer applicants and employees are subject…