Apply on Employer Site

Boeing · 1 day ago

Associate Product Security Engineer

Hazelwood, MO

Full-time

Onsite

Entry Level

$102K/yr - $138K/yr

2+ years exp

Boeing is seeking an innovative Associate Product Security Engineer - Avionics Development to join their growing team as part of an integrated Product Security Organization. The successful candidate will be responsible for the development, implementation, and sustainment of product cyber security and resiliency engineering for avionics throughout the entire lifecycle.

AerospaceIndustrial

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Support development, implementation, and sustainment of product security for Boeing avionics systems, throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle

Support coordination with platforms and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions

Support coordination with other engineering stakeholders – systems, software, and hardware – advising on the results of security analysis – to develop secure architectures and designs

Support the integration of standards and processes for product security engineering for avionics development, and to meet applicable program and certification requirements

Utilize the Risk Engineering digital thread to inform product requirements surrounding cyber survivability against specified cyber threats – by performing criticality, adversity, threat analysis for avionics systems

Support assessment of internal customer requirements to derive strategies and detailed security requirements system and technical requirements

Support the execution of PSE activities – security requirements, architectures, risk assessments

Documenting PSE activities and delivering PSE artifacts

Support risk reduction and technology maturation activities – where appropriate – resulting in innovative solutions in product and services offering

Support the identification and elevation of product security risks to the integrated product team(s) and management

Qualification

Cybersecurity controlsProduct security engineeringNetwork security managementRisk assessmentsSecurity certificationStakeholder engagementThreat analysisTechnical documentation

Required

Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement

2+ years of related work experience or an equivalent combination of education and experience

Working knowledge of cybersecurity controls, frameworks, and the vulnerability management lifecycle

Experience in architecture, design, management, administration and troubleshooting of networks with a focus on security controls and firewall administration

Experience in cyber security and/or product security engineering

Experience in analysis of customer security requirements and deriving detailed security requirements, architecture & design

Ability to identify new opportunities and engage with stakeholders to define, plan, resource and deliver solutions

Experience coordinating and presenting technical content to a diverse audience, as well as preparing technical documentation

Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle – to inform requirements, and design

Experience generating product cyber security artifacts for customer/certifiers

This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a 'U.S. Person' as defined by 22 C.F.R. 120.62 is required. 'U.S. Person' includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee

This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship. An interim and/or final U.S. Secret Clearance Post-Start is required

Preferred

Security certification is desired: DoD 8570.01M / DoDD 8140.01 certification at IASAE Level II or higher (such as Security+ CE, GSEC, SSCP, CISSP, CISA, CCNA-Security)

Experience with defense security standards (DoDI 8510.01, ICD-503, CNSSI-1253, NIST 800-53) to perform risk analysis and provide strategic direction for system architectures, operations and delivered products

Experience with military avionics and military platform operations

U.S. Top Secret or Secret Security Clearance