Product Security Engineer
Company:The Boeing Company
Overview:The Boeing Defense, Space, and Security (BDS) Engineering division is looking for a Product Security Engineer to join a team in Albuquerque, NM.
At Boeing, we are all innovators on a mission to connect, protect, explore and inspire. From the seabed to outer space, you'll learn and grow, contributing to work that shapes the world. Find your future with us!
Position Responsibilities:- Develop, implement, and sustain product security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle.
- Develop and enhance system requirements and architectures for product security to meet all applicable certification and customer requirements.
- Ensure security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support.
- Define and identify product security requirements for suppliers of components and subsystems for integration into Boeing products and services.
- Coordinate with government, customers, suppliers, and industry to identify risks and improve industry and regulatory security standards and requirements for programs and interfacing systems.
- Conduct research and development activities that result in innovative solutions.
- Advise customers on maintaining product security and certification, including security consequences of modifying products and services.
This position requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) Basic Qualifications: - Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement, and 10 to 15 years of relevant work experience.
- Skills and abilities to: collect, organize, synthesize, and analyze data; summarize findings; develop conclusions and recommendations from appropriate data sources. Develop and support security developmental and operational test planning & execution.
- Engineering-focused experience in incident response, designing and implementing technical controls and workflows to detect, contain, and remediate cyber incidents while preserving forensic integrity.
- Ability to identify susceptibility, survivability, and vulnerability (S/V) of the systems, subsystems and delivery mechanisms, based on the knowledge of characteristics and capabilities of threats (e.g. protocol exploits, identity spoofing, malware injection techniques, application layer vulnerabilities).
- Knowledge of emerging computing and information technology areas to manage advanced research computing technology proposals, projects and resources.
- Knowledge of system security domains (e.g., information assurance, anti-tamper, intrusion detection, software protection, software assurance, communications security, encryption and key management, network security, reverse engineering, countermeasures, certification and accreditation, special security endorsement) and industry and government guidance and regulations which engineers apply to produce secure systems. Experience with performing system security engineering activities that follow NIST 800-160. Strong understanding of secure network architecture and design
- Experienced in engineering requirements decomposition. Demonstrated expertise in implementing and maintaining DoD security policies and regulations, including threat & risk assessments, accreditation processes, and continuous monitoring to ensure mission assurance and compliance
- Knowledge and understanding of the methodology and processes associated with risk management, conducting trade studies including cost as an independent variable (CAIV) trade. Ability to: identify and quantify potential risks areas within specific (depth) and across multiple engineering disciplines (breadth); understand design constraints (technical, cost & schedule); identify and trade alternatives (i.e., trade studies); select/recommend the best plan for mitigating risks; implement and execute plans for mitigating risk; and establish appropriate performance tracking metrics to track risk burndown over time.
- Ability to effectively utilize risk management tools (iso-risk charts/plots, waterfall, etc.) to support program/project execution.
- Demonstrated systems-thinking to analyze complex technical and organizational interactions, identify root causes, and design scalable, resilient solutions across hardware, software, and process domains.
Preferred Qualifications: - Knowledgeable in applying Multi-Level Security (MLS) and Cross-Domain Solutions (CDS) to enable secure information sharing across classification and network domains
- Proficient in Model-Based Systems Engineering (MBSE) tools to design, analyze, and validate complex systems throughout the lifecycle.
- Understanding Secure Software Development within DevSecOps
- Knowledgeable in Cyber Supply Chain Risk Management (C-SCRM) to identify, assess, and mitigate supplier-originated risks across hardware, software, and services.
- Advanced knowledge of design concepts and techniques (e.g., concurrent engineering, Design for Manufacture/Assembly [DFM/A]).
- Familiarity with industrial control systems (ICS) and proprietary standards and protocols.
Pay & Benefits:At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and several programs that provide for both paid and unpaid time away from work.
The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.
Pay is based upon candidate experience and qualifications, as well as market and business considerations.
The Boeing 401(k) helps you save for your future, with contributions from Boeing that can help you grow your retirement savings. Our best-in-class retirement benefit features:
- Best in class 401(k) plan: we'll match your contributions dollar for dollar, up to 10% of eligible pay with Immediate 100% vesting
- Student Loan Match: The Boeing 401(k) Student Loan Match allows eligible enrolled U.S. employees to have their qualified student loan debt payments counted, along with any match-eligible contributions they make, for purposes of determining the Company Match to employees' Boeing 401(k) accounts.
Language Requirements:Not Applicable
Education:Not Applicable
Relocation:This position offers relocation based on candidate eligibility.
Export Control Requirement:This is not an Export Control position.
Safety Sensitive:This is not a Safety Sensitive Position.
Security Clearance:This position requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
Visa Sponsorship:Employer will not sponsor applicants for employment visa status.
Contingent Upon Award ProgramThis position is not contingent upon program award
Shift:Shift 1 (United States of America)
Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning
Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.
EEO is the law
Boeing EEO Policy
Request an Accommodation
Applicant Privacy
Boeing Participates in E - Verify- E-Verify (English)
- E-Verify (Spanish)
Right to Work Statement - Right to Work (English)
- Right to Work (Spanish)
Never miss an opportunity! Create an alert based on the job you applied for.
