Senior or Lead Product Cybersecurity Engineer

Job Description

At Boeing, we innovate and collaborate to make the world a better place. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

Boeing Commercial Airplanes is seeking a Senior (Level
4) or Lead (Level
5) Product Security Technical Engineer to join our Cybersecurity Product Development and Innovation team onsite in Everett, WA
. This position is responsible for ensuring security, safety, and resiliency of all digitally-connected, in-service and future BCA airplanes with the development and support of system developments, methods, and tools. As such, this position offers a great career opportunity to enter the exciting and growing area of cybersecurity.

Primary responsibilities:

• Leads the development of effective and/or innovative technical solutions with an awareness of consequences of judgements individually and through teams.
• Leads risk, threat, and vulnerability assessments of the product assets and production systems in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance.
• Leads development and coordination of system security requirements with different system stakeholders.
• Reviews technical data and documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery.
• Coordinates and advises security testers to validate coverage and impacts to analysis.
• Coordinates with external customers and internal stakeholders on detection capabilities in alignment with continued airworthiness strategies.
• Leads the development, implementation, and communication of the sustainment program to ensure continued product security, safety, and resiliency of digitally-connected, in-service airplane models.
• Advises and checks configuration management and security of facilities, equipment, tools, data, networks, and resources used to ensure continued product security and resiliency of in-service models.

Basic Qualifications (Required Skills and Experience):

• Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science
• Level 4: 9+ years of related work experience or an equivalent combination of education and experience
• Level 5: 14+ years of related work experience or an equivalent combination of education and experience
• 5+ years of related work experience in systems engineering, systems integration, software engineering, electrical engineering, certification, network security, and/or cybersecurity

Preferred Qualifications (Desired Skills and Experience):

• Security certification is desired:
  DoD 8570.01M / DoDD 8140.01 certification at IASAE Level II or higher (such as Security+ CE, GSEC, SSCP, CISSP, CISA, CCNA-Security)

• Bachelor of Science degree from an accredited course of study, where the Accreditation Board for Engineering and Technology (ABET) is the preferred accreditation standard

• Working knowledge in systems, engineering, systems integration, airplane systems, and/or airplane certification

• Experience in cybersecurity, security network architecture, embedded systems security, security testing and evaluation, network design, cyber physical systems or PKI infrastructure

• Experience planning and executing penetration tests in one of more of the following domains:
  • Windows and Linux Operating Systems and IP-based networks
  • Web applications
  • Avionics, embedded systems, non-standard ethernet protocols (ARINC, etc.)
  • Hardware

• Experience with hardware and firmware security

• Experience coordinating and presenting technical content to a variety of technical and non-technical audiences

• Possess one or more security certifications, including but not limited to: CISSP;
  Security+; CEH; CCNA; UNIX/LINUX System Administration; GIAC GPEN, GWAPT, or GXPN;
  Offensive Security Certified Engineer (OSCE);
  Offensive Security Certified Professional (OSCP)

Drug Free Workplace:

Boeing…