Product Security Analyst; Mid-Senior

Boeing Defense Space & Security (BDS) - Product Security Analyst

Location:

Seattle, Washington. This role is 100% onsite.

In this role, you will lead embedded system cybersecurity and resiliency efforts across the full product lifecycle—from requirements and design through testing, production, and sustainment—ensuring the security of Boeing’s advanced aerospace products and services.

• Support the development and enhancement of product security requirements and architectures to meet certification and customer requirements.
• Conduct product security risk assessments, attack surface analyses, and vulnerability evaluations for embedded and IT systems.
• Assist in security audits and assessments of applications, components, and subsystems integrated into Boeing products and services.
• Coordinate with governments, customers, suppliers, and industry partners to identify risks and improve security standards and regulatory compliance.
• Analyze and triage product security incidents, identifying attack indicators and escalating potential breaches.
• Perform trend analysis and support the development of detection and mitigation capabilities against evolving threats.
• Prepare and present technical reports and briefings tailored to technical teams and senior leadership.
• Collaborate with cross-functional teams to integrate security practices into the product lifecycle, ensuring a holistic approach to security.
• Stay current with emerging threats, vulnerabilities, and security technologies to continuously improve security posture.
• Support research and development activities that result in innovative solutions to enhance product security.
• Travel to other Boeing sites within the U.S. may be required (estimated to be ~10% travel time).

• Individual Contributor 3 (IC-3): Focuses on researching and analyzing technical data, performing standard risk assessments, and supporting incident coordination. Prepares technical reports and briefings under guidance.
• Individual Contributor 4 (IC-4): Leads complex security analyses and incident coordination efforts. Provides technical leadership within teams and presents findings to senior management. Drives improvements in detection capabilities and security integration.
• Individual Contributor 5 (IC-5): Acts as a consultant and technical authority on product security integration and risk management. Oversees complex assessments and leads strategic initiatives to advance detection and mitigation capabilities. Communicates technical impacts to senior leadership and influences enterprise security posture.

• Bachelor’s degree in Cybersecurity or related technical discipline.
• Level-specific education and experience:
  IC‑3: Bachelor’s degree and 5+ years’ experience or Master’s and 3+ years;
  IC‑4: Bachelor’s degree and 9+ years’ experience or Master’s and 7+ years;
  IC‑5: Bachelor’s degree and 14+ years’ experience or Master’s and 12+ years.
• 3+ years of experience in product security analysis, risk assessment, vulnerability management, or related fields.
• Must obtain a CompTIA Security+, CISSP certification or equivalent Cyber Security certification within 6 months of employment.
• Active/current U.S. Secret Security Clearance; U.S. Citizenship required.

• Experience leading security projects or teams (for levels IC‑4 and IC‑5).
• Knowledge of system-level product security concepts and operational environments.
• Familiarity with malware analysis, attack surface reduction, and security audit methodologies.
• Experience with security incident response and trend analysis.
• Ability to present complex technical information to diverse audiences, including senior leadership.
• Strong analytical and problem‑solving skills.
• Effective written and verbal communication skills.
• Ability to work collaboratively in cross‑functional teams.

Boeing is a Drug Free Workplace where post‑offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria are met as outlined in our policies.

This position offers relocation based on candidate eligibility. Basic relocation will…