Product Security Analyst; Mid-Senior

Overview

At Boeing, we innovate and collaborate to make the world a better place. Boeing Defense Space & Security (BDS) is seeking a Product Security Analyst in Seattle, Washington. The role leads embedded system cybersecurity and resiliency across the full product lifecycle—from requirements and design through testing, production, and sustainment—ensuring the security of advanced aerospace products and services.

• Support the development and enhancement of product security requirements and architectures to meet certification and customer requirements.
• Conduct product security risk assessments, attack surface analyses, and vulnerability evaluations for embedded and IT systems.
• Assist in security audits and assessments of applications, components, and subsystems integrated into Boeing products and services.
• Coordinate with governments, customers, suppliers, and industry partners to identify risks and improve security standards and regulatory compliance.
• Analyze and triage product security incidents, identifying attack indicators and escalating potential breaches.
• Perform trend analysis and support the development of detection and mitigation capabilities against evolving threats.
• Prepare and present technical reports and briefings tailored to technical teams and senior leadership.
• Collaborate with cross-functional teams to integrate security practices into the product lifecycle, ensuring a holistic approach to security.
• Stay current with emerging threats, vulnerabilities, and security technologies to continuously improve security posture.
• Support research and development activities that result in innovative solutions to enhance product security.
• Travel to other Boeing sites within the U.S. may be required (estimated 10% travel time).

• Individual Contributor 3 (IC-3):
  Researches and analyzes technical data, performs standard risk assessments, and supports incident coordination. Prepares technical reports and briefings under guidance.
• Individual Contributor 4 (IC-4):
  Leads complex security analyses and incident coordination efforts. Provides technical leadership within teams and presents findings to senior management. Drives improvements in detection capabilities and security integration.
• Individual Contributor 5 (IC-5):
  Acts as a consultant and technical authority on product security integration and risk management. Oversees complex assessments and leads strategic initiatives to advance detection and mitigation capabilities. Communicates technical impacts to senior leadership and influences enterprise security posture.

• Basic Qualifications
• Bachelor’s degree in Cybersecurity or a related technical discipline.
• For IC-3:
  Bachelor’s degree and 5+ years’ experience or Master’s and 3+ years.
• For IC-4:
  Bachelor’s degree and 9+ years’ experience or Master’s and 7+ years.
• For IC-5:
  Bachelor’s degree and 14+ years’ experience or Master’s and 12+ years.
• 3+ years of experience in product security analysis, risk assessment, vulnerability management, or related fields.
• Must obtain a CompTIA Security+, a CISSP certification or equivalent Cyber Security certification within 6 months of employment.
• Preferred Qualifications
• Experience leading security projects or teams (for levels IC-4 and IC-5).
• Knowledge of system-level product security concepts and operational environments.
• Familiarity with malware analysis, attack surface reduction, and security audit methodologies.
• Experience with security incident response and trend analysis.
• Ability to present complex technical information to diverse audiences, including senior leadership.
• Strong analytical and problem solving skills.
• Effective written and verbal communication skills.
• Ability to work collaboratively in cross-functional teams.

• Location
  :
  Seattle, Washington. 100% onsite.
• Travel
  :
  Estimated 10% within U.S.
• Security Clearance
  :
  Minimum active current U.S. Secret Security Clearance; U.S. citizenship required.
• Shift
  : 1st shift.
• Relocation
  :
  Basic relocation offered for eligible internal candidates.
• Drug Free Workplace
  :
  Compliance with Boeing drug testing policies.
• Export Control Requirements
  : U.S. Person status required…