Product Security Engineer - Advanced Weapons Proprietary Programs at Boeing

Saint Charles, Missouri, United States -

Full Time

Start Date

Immediate

Expiry Date

13 Mar, 26

Salary

207000.0

Posted On

13 Dec, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Product Security, Cybersecurity Engineering, Risk Assessment, System Analysis, Software Assurance, Cyber Threat Intelligence, Compliance, CAMEO, Windows Administration, RHEL Administration, Static Code Analysis, Dynamic Code Analysis, Cyber Tools, Documentation, Collaboration, Leadership

Industry

Aviation & Aerospace

Description

Product Security Engineer - Advanced Weapons Proprietary Programs Company: The Boeing Company Boeing’s Proprietary Programs in the Advanced Weapons portfolio are seeking motivated and talented Mid-Level (Levels 3 or 4) Product Security Engineers in St. Charles, Missouri! These positions will support the performance of product security and cybersecurity engineering for specialized Advanced Weapons Proprietary Programs which defend the United States homeland and its regional allies all over the world. Be a part of our passionate and highly motivated team who are excited to be on the forefront of defense of our nation. Boeing offers a comprehensive benefits package including generous Paid Time Off (PTO), flexible work schedules, paid parental leave for mothers and fathers, 401k matching, tuition assistance for earning advanced degrees, and paid medical leave programs. Come Join Us and Build the Future! Primary Responsibilities: Team members will work with other industry partners in the development and execution of a comprehensive assessment program supporting the specialized Advanced Weapons Proprietary Programs in the Space, Intelligence & Weapons Systems (SIWS) organization. These individuals will act as the primary product security engineers on the program for assessing, updating, and maintaining the security posture of the programs. This team will be supporting the program’s systems by interacting continuously with the cyber team compliance team to remediate any vulnerabilities found during automated or manual cyber scans. A detailed oriented individual with a strong leadership skillset is a must for this position. Assess organization-wide security and privacy risk and update assessment results on an ongoing basis. Perform system analysis and develop system test for cyber threats, cyber test activities, and the cybersecurity of large-scale events. Ensure product security engineering development lifecycle is followed, with an emphasis on clear requirements development/verification (using CAMEO). Perform criticality analysis to include the ability to work with suppliers, identify critical components, and integrating them into the overall system Perform cyber risk assessments and develop risk mitigation plans (i.e., POA&Ms, SCRM, etc.) using a variety of tools including but not limited to CAMEO. Support and facilitate various ATO/IATT packages including processing IAVMs and CTOs for the same. Perform software assurance tasks, including but not limited to software assurance risk reports. Support proposal development efforts, including but not limited to: BOE generation, GR&A development, trade study analysis. Support the engineering installation & analysis of patches and various system updates and upgrades to determine system consequence of these changes. Attend, collect data from, out brief, and facilitate collaboration and project management from various program boards. Applying Security Technical Implementation Guides (STIGs) Managing and addressing any Cyber Tasking Orders (CTOs) related to the Cyber Tools. Documentation and verification of all installation and configuration steps for the labs and operations deliveries. Providing feedback to Cyber Leadership and engineers to improve the cybersecurity tools and processes. Collaborating with local Information System Security Officers (ISSOs) to ensure compliance with relevant cybersecurity standards and regulations. Support cyber threat intelligence activities. Support the development and maintenance of cyber scanning, patching, remediation, tools and applications Support, as required, TEMPEST, DFARS, COMSEC, CNSSI, and other compliance drivers as needed. Perform and/or support the development of tools for cyber forensics Develop, define efficiencies and improvements to tools to improve team productivity Perform system analysis trade studies to define technical concepts and solutions This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options. (St. Charles, MO.) This position requires an active Secret U.S. Security Clearance. (A U.S. Security Clearance that has been active in the past 24 months is considered active.) Basic Qualifications (Required Skills/Experience): Bachelor or Master of Science degree from an accredited course of study, in Engineering, Computer Science, Mathematics, Physics, or Chemistry. Active Secret clearance Experience using analytical, collaboration, communication and organizational skills 5 years+ experience in product security / cybersecurity engineering 5 years+ experience with industry standard cybersecurity frameworks (NIST, OWASP, DFARS) Preferred Qualifications (Desired Skills/Experience): Current DoD 8570 certification at IAT Level II / IAM Level I or higher (e.g., Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA) Experience using CAMEO (proficiency preferred) 5 years+ experience in Windows/RHEL System admin experience, installing, tuning & troubleshooting Cyber Tools to include ESS/HBSS, ConfigOS, Splunk, etc. 5 years+ experience in configuring, running, and scripting audit tools 5 years+ experience using knowledge of Software Assurance (SwA) static and/or dynamic code analysis (e.g. Fortify) Experience with Federal Information Security Management Act (FISMA)/RMF and National institute of Standards and Technology (NIST) 800-53 requirements Experience leading system and component level cyber test and evaluation, including threat and security assessments, and tabletop exercises Experienced self-starter with strong written and oral communication skills, and a focus on translating technically complex issues into simple, easy to understand concept Growing understanding of DoD defense systems architectures and communications system concepts, mission, and common system test and data analysis techniques Typical Education/Experience: Mid-Level (3): Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), computer science, engineering data science, mathematics, physics or chemistry (e.g. Bachelor) and typically 5 or more years' related work experience or an equivalent combination of technical education and experience or non-US equivalent qualifications. In the USA, ABET accreditation is the preferred, although not required, accreditation standard. Senior Level (4): Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), computer science, engineering data science, mathematics, physics or chemistry (e.g. Bachelor) and typically 9 or more years' related work experience or an equivalent combination of technical education and experience or non-US equivalent qualifications. In the USA, ABET accreditation is the preferred, although not required, accreditation standard. Relocation: This position offers basic relocation based on candidate eligibility. Shift: This position is for 1st shift. Drug Free Workplace: Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Please note that the salary information shown below is a general guideline only. Salaries are based upon candidate experience and qualifications, as well as market and business considerations. Mid-Level (3) Summary pay range: $123,250 – $166,750 Mid-Level (4) Summary pay range: $153,000– $207,000 Referrals to this job are not eligible for a monetary employee bonus. Language Requirements: Not Applicable Education: Bachelor's Degree or Equivalent Relocation: This position offers relocation based on candidate eligibility. Export Control Requirement: This position must meet export control compliance requirements. To meet export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.15 is required. “U.S. Person” includes U.S. Citizen, lawful permanent resident, refugee, or asylee. Safety Sensitive: This is not a Safety Sensitive Position. Security Clearance: This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) Visa Sponsorship: Employer will not sponsor applicants for employment visa status. Contingent Upon Award Program This position is not contingent upon program award Shift: Shift 1 (United States of America) Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. EEO is the law Boeing EEO Policy Request an Accommodation Applicant Privacy Boeing Participates in E – Verify E-Verify (English) E-Verify (Spanish) Right to Work Statement Right to Work (English) Right to Work (Spanish) You can do work that enables all of humanity to take flight. Our teammates in more than 65 countries grow their careers across commercial airplanes, space, defense, sustainability and other areas. Here, you can contribute to what matters most in your career, in your community and around the world. Find answers to questions about applying, interviews, benefits, and more on FAQ page Boeing is committed to providing reasonable accommodations/adjustments to applicants with disabilities. Visit our accommodations page for more info.

Responsibilities

Team members will assess, update, and maintain the security posture of specialized Advanced Weapons Proprietary Programs. They will interact with cyber compliance teams to remediate vulnerabilities and perform system analysis for cyber threats.