Product Security Engineer

Boeing are seeking a Product Security Engineer (IC2) to join our growing team in Bristol and Yeovil and help shape the future of integrating security and resiliency across our products and services.  

Product security engineering is a cross-cutting engineering function and a critical element of designing, delivering, and maintaining Boeing products and services. Our mission is to influence designs and implement security solutions that protect product integrity. You will join a highly energised team which is committed to staying ahead of evolving cyber threats, developing effective security measures, consistent standards, practices, and tools.  

As a Product Security Engineer, you will advance our vision to be the trusted global leader in product security engineering, ensuring product safety, integrity, and assurance across cyber-contested environments.  

You will collaborate with a multidisciplinary, enterprise-wide community to develop and implement best practices, tools, and solutions that protect complex systems, including IT, embedded, and non-IT environments. This role offers the opportunity to solve high-impact security challenges, influence next-generation security engineering, and directly contribute to the resilience of Boeing’s commercial and defence offerings.  

Strong communication, problem-solving skills, and the ability to work independently and collaboratively with diverse teams and customers are essential.  

Ideal candidates bring knowledge and experience in some or all the following: system security, systems engineering, safety airworthiness, and testing.  

If you are passionate about advancing cybersecurity in aerospace & digital systems and want to make a meaningful impact on the future of our products and services, we encourage you to apply.  

• →Identify and support the development of product security requirements and architectures to meet certification and customer requirements.  
• →Participate in design and build of security features into products and services, delivering engineering excellence.  
• →Apply cybersecurity risk analysis techniques and support threat assessments. Analysing likelihood, impact, and mitigations.  
• →Contribute to security assessments and audits to identify vulnerabilities and recommend mitigation strategies.  
• →Integrate security practices across the product lifecycle through collaboration with cross-functional teams.  
• →Communicate product security and certification implications, including the security consequences of product modifications to internal stakeholders, suppliers & customers.  
• →Support Senior PSEs in their work scope with governments, customers, suppliers, and industry to identify risks, improve program and interfacing-system security standards, and requirements.  
• →Contribute to cyber threat intelligence activities and apply findings to product security decisions.  
• →Participate in research and development activities aligned to PSE goals and objectives. 
• →Perform system analysis and trade studies to define technical concepts and optimal security solutions.  
• →Develop and improve tools, processes, and efficiencies to increase team productivity.  
• →Participate in program boards and reviews: collect data, brief stakeholders, and facilitate cross-team collaboration and project management.  
• →Monitor emerging threats, vulnerabilities, and security technologies to improve product security posture.  

• Highly motivated with strong written, verbal communication and interpersonal skills.  
• Strong analytical, problem-solving and "Systems thinking" skills.  
• Proficient in working collaboratively in cross-functional teams.  
• Skilled at translating complex issues into clear, actionable concepts.  
• Experience coordinating and presenting technical content to technical and non‑technical audiences.  
• Working knowledge in systems engineering, cybersecurity, systems safety, airplane system development, product security, or systems security engineering.  
• Familiarity with cybersecurity principles, standards, and best practices.  
• Understanding of requirements definition, subsystem allocation, system architectures, integration frameworks, and integration testing.  

• Understanding of Concept of Operations (ConOps), requirements development, and use‑case definition.  
• Experience in risk assessment and management, including threat modelling and vulnerability analysis for networked and embedded systems.  
• Experience engaging in cybersecurity audits & investigations.   
• Experience with security incident response and trend analysis.  
• Familiarity with malware analysis, attack surface reduction, and security analysis techniques.   
• Knowledge of DevSecOps principles and practices.  
• Familiarity of avionics, embedded computing, and communications systems. (ARINC 400, 600, 800 series etc.)  
• Knowledge of common networking and computing protocols & architectures. (TCP/IP, OSI, UDP, Serial/parallel communications, Bus architectures etc.).   
• Understanding of hardware and software integration processes.  
• Knowledge of safety-critical platforms and embedded systems, such as those found in ground vehicles and aircraft.  
• Familiarity with Secure by Design principles.  

This position does not offer relocation. Candidates must live in the immediate area or relocate at their own expense.