This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
At Boeing, we innovate and collaborate to make the world a better place. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. Boeing is seeking an innovative and experienced Mid-LevelProduct Security Engineer - Avionics Development to join our growing team as part of an integrated Product Security Organization. The successful candidate will be responsible for the development, implementation, and sustainment of product cyber security and resiliency engineering for avionics through requirements, design, analysis, build, test, production, operations, support and sustainment. You will be a part of Boeing's Product Security Engineering Organization, which is a growing multi-disciplinary cybersecurity engineering organization that is responsible for the cyber security and resiliency of our products, platforms, and services. You will have the opportunity to shape and influence Product Security Engineering within Boeing and engage with Boeing’s Product Security community. Furthermore, your effort will directly inform our Enterprise Product Security Engineering team with lessons learned and technologies, that directly enhances our commercial and defense offerings.
Job Responsibility:
Lead the development, implementation, and sustainment of product security for Boeing avionics systems, throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle
Coordinate with platforms and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions
Coordinate with other engineering stakeholders – systems, software, and hardware – advising on the results of security analysis – to develop secure architectures and designs
Lead, establish, and integrate standards and processes for product security engineering for avionics development, and to meet applicable program and certification requirements
Utilize the Risk Engineering digital thread to inform product requirements surrounding cyber survivability against specified cyber threats – by performing criticality, adversity, threat analysis for avionics systems
Assessing internal customer requirements to derive strategies and detailed security requirements system and technical requirements
Executing PSE activities – security requirements, architectures, risk assessments
Documenting PSE activities and delivering PSE artifacts
Lead risk reduction and technology maturation activities – where appropriate – resulting in innovative solutions in product and services offering
Identifying and elevating product security risks to the integrated product team(s) and management
Requirements:
Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
5+ years of related work experience or an equivalent combination of education and experience
Understanding of cybersecurity controls, frameworks, and the vulnerability management lifecycle
Experience in architecture, design, management, administration and troubleshooting of networks with a focus on security controls and firewall administration
Experience in cyber security and/or product security engineering
Experience in analysis of customer security requirements and deriving detailed security requirements, architecture & design
Demonstrated ability to identify new opportunities and engage with stakeholders to define, plan, resource and deliver solutions
Experience with the development of cybersecurity philosophies, patterns, requirements, secure architectures and designs
Experience coordinating and presenting technical content to a diverse audience, as well as preparing technical documentation
Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle – to inform requirements, and design
Experience generating product cyber security artifacts for customer/certifiers
Experience with defense security standards (DoDI 8510.01, ICD-503, CNSSI-1253, NIST 800-53) to perform risk analysis and provide strategic direction for system architectures, operations and delivered products
Nice to have:
Security certification is desired: DoD 8570.01M / DoDD 8140.01 certification at IASAE Level II or higher (such as Security+ CE, GSEC, SSCP, CISSP, CISA, CCNA-Security)
Experience with military avionics and military platform operations
U.S. Top Secret or Secret Security Clearance
What we offer:
Generous company match to your 401(k)
Industry-leading tuition assistance program pays your institution directly
Fertility, adoption, and surrogacy benefits
Up to $10,000 gift match when you support your favorite nonprofit organizations