Senior Product Security Engineer

United States·Usa - Berkeleysenior

Product Security EngineerCybersecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Support the development, implementation, and sustainment of product security requirements for Air Dominance & Phantom Works avionics systems/subsystems, throughout the requirements, design, analysis,

Technical Tools

Product Security EngineerCybersecurity

Senior Product Security Engineer

The Boeing Company

The Boeing Defense, Space & Security (BDS) Air Dominance (AD) Product Security Engineering (PSE) organization is seeking a Senior Product Security Engineer to provide technical support for product cyber security and resiliency engineering for embedded systems through requirements, design, analysis, build, test, production, operations, support and sustainment in the Air Dominance & Phantom Works current/future portfolio in Berkeley, MO / Hazelwood, MO.

Responsibilities

~1 min read

→Support the development, implementation, and sustainment of product security requirements for Air Dominance & Phantom Works avionics systems/subsystems, throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle
→Coordinate with partners and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions
→Coordinate with other engineering stakeholders – systems, software, and hardware – advising on the results of security analysis – to develop secure architectures and designs
→Lead, establish, and integrate standards and processes for product security engineering for embedded avionics development, and meet applicable program/certification requirements
→Utilize the Risk Engineering digital thread to inform product requirements surrounding cyber survivability against specified cyber threats – by performing criticality, adversity, threat analysis for avionics systems
→Lead risk reduction and technology maturation activities – where appropriate – resulting in innovative solutions in product and services offering
→Implements appropriate security controls and requirements per JSIG, DoD and ICD 503 RMF, NISPOM, or DoD Overprint to the NISPOM
→Lead inputs for planning, scheduling, risks, issues, and opportunity activities for cyber security
→Support team building, leading cross-functional teams, motivating and engaging team member, and inspiring work groups through daily interactions.

Requirements

~2 min read

Senior (Level 4) - Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), computer science, engineering data science, mathematics, physics or chemistry (e.g. Bachelor) and typically 9 or more years' related work experience or an equivalent combination of technical education and experience or non-US equivalent qualifications. In the USA, ABET accreditation is the preferred, although not required, accreditation standard.
Experience in the development of avionics computer systems.
Experience in performing security risk assessments and risk management within networked operational technology (OT)
Experience in embedded software architecture, agile development, software development lifecycle, software application testing, security tools and practices used in development pipelines
Demonstrated ability to identify new opportunities and engage with stakeholders to define, plan, resource and deliver solutions.
Experience with the development of cybersecurity philosophies, patterns, requirements, secure architecture and design’s
Experience coordinating and presenting technical content to a diverse audience, as well as preparing technical documentation
Able to work autonomously
Knowledge of cyber security incident response protocols (identification, impact assessment, containment, remediation, evidence handling, technical reporting, etc.) and safeguarding information.

Experience in product cyber security for avionics systems and component level development
Experience performing adversity (threat) analysis, security risk assessments, and maturing the analysis throughout the development lifecycle – to inform requirements, and design
Experience generating product cyber security artifacts for customer/certifiers
Security certification is desired (e.g. CISSP); Please state/include on resume
Experience and applied knowledge of security airworthiness processes and methods applied to avionics systems, such as but not limited to DO-326A and DO-356A
Experience and/or applied knowledge of complex safety critical systems development process methodologies and associated practices, such as but not limited to DO-178C, DO-254
Security certification is desired (e.g. CISSP); Please state/include on resume

Not Applicable

This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Bachelor's Degree or Equivalent

This position offers relocation based on candidate eligibility.

This is not a Safety Sensitive Position.

This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship. An interim and/or final U.S. Secret Clearance Post-Start is required.

Employer will not sponsor applicants for employment visa status.

This position is not contingent upon program award

Shift 1 (United States of America)