Product Security Engineer

Product Security Engineer

Company:
The Boeing Company

Boeing's Global Services has multiple openings for a Product Security Engineer at various levels.

Boeing Global Services (BGS) is seeking Product Security Engineers at various levels to join our Central Product Security team. You will help protect government training systems, aircraft support equipment, and related products by providing technical support across the product lifecycle-from requirements and design through sustainment.

Our portfolio includes programs such as P-8A Poseidon, F/A-18 Super Hornets/Growlers, F-15 Eagle, MQ-25 Stingray, T-7A Red Hawk, F-22 Raptor, and V-22 Osprey.re SPEEA representation applies, this job family will be covered by the terms of the collective bargaining agreement. Applicable and appropriate educational/certification credentials from an accredited institution and/or equivalent experience is required.

Position Responsibilities

• Develop and refine system requirements and architectures to meet certification and customer security needs.
• Collaborate with internal and external stakeholders-including customers, suppliers, and industry partners-to identify and mitigate security risks.
• Provide recommendations to enhance industry and regulatory security standards.
• Advise customers on product security, certification processes, and impacts of modifications.
• Integrate security practices across the product lifecycle in partnership with cross-functional teams.
• Conduct security assessments, audits, threat and risk analyses, and recommend mitigations.
• Build and evaluate network and software system architectures.
• Support cyber test activities, including tabletop exercises.
• Assess software assurance activities to ensure secure software pedigree.
• Identify assets and evaluate risks, threats, and vulnerabilities in accordance with industry and government standards.
• Ensure designs uphold integrity, availability, confidentiality, and non-repudiation.
• Implement security controls aligned with JSIG, DoD RMF, NISPOM, and other relevant policies.
• Work independently with minimal direction (Level 3) or under guidance (Levels 1-2).

This position is expected to be 100% onsite in St. Louis, MO.

This position requires the ability to obtain a US Security Clearance for which the US Government requires ship. An interim and/or final U.S. secret clearance Post Start is required.

Basic Qualifications (Required Skills/Experience):

• Bachelor's degree in engineering, engineering technology, chemistry, physics, mathematics, or computer science from an accredited institution.
• An internship or 1+ years of Product Security Engineering experience.
• Internship or 1+ years of Learning and applying security principles; supporting assessments and documentation
• Experience or knowledge in product security or cybersecurity concepts scaled to level.
• Experience coordinating and presenting technical content and preparing documentation.
• Knowledge of cybersecurity incident response protocols.
• Experience with Risk Management Framework (RMF) processes and NIST/DoD standards.

Preferred Qualifications (Desired Skills/Experience):

• Experience with vulnerability scanning, mitigation, and administration on Windows (XP, 7, 10), Linux, and Oracle Solaris.
• DoD 8570 Level II Certification (e.g., CompTIA Security+, CySA+).
• 2+ years developing cybersecurity philosophies, secure architectures, and requirements (Level 2+).Product cybersecurity experience in avionics systems and component-level development.
• 2+ years of Product Security Engineering experience
• Familiarity with DevSecOps principles.
• Understanding of Concept of Operations, requirements, and use-case development.
• Experience in risk assessment, threat modeling, and vulnerability analysis of embedded systems.
• Knowledge of hardware/software integration and safety-critical embedded systems.
• Participation in cybersecurity competitions, collaborative projects, or professional organizations.
• Experience generating cybersecurity artifacts for customers/certifiers.
• Security certifications such as CISSP.
• Experience with military aircraft systems.
• Software skills: proficiency in C/C++, Ada, understanding of software lifecycle, and secure coding practices.

Typical Education/ Experience:

Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, computer science, mathematics, physics or chemistry (e.g. Bachelor) and related work experience or an equivalent combination of technical education and experience (e.g. PhD, Master+ related work experience). In the USA, ABET accreditation is the preferred, although not required, accreditation standard

Relocation:

This position offers relocation based on candidate eligibility.

Drug Free Workplace:

Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.

Pay & Benefits:

At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

Pay is based upon candidate experience and qualifications, as well as market and business considerations.

Summary Pay Range:

Entry Level - $81K - $99K

Associate - $104K - $127K

Mid-Level - $130K - $159K

Language Requirements:
Not Applicable

Education:
Bachelor's Degree or Equivalent

Relocation:
This position offers relocation based on candidate eligibility.

Export Control Requirement:
This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a "U.S. Person" as defined by 22 C.F.R. 120.62 is required. "U.S. Person" includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Safety Sensitive:
This is not a Safety Sensitive Position.

Security Clearance:
This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship. An interim and/or final U.S. Secret Clearance Post-Start is required.

Visa Sponsorship:
Employer will not sponsor applicants for employment visa status.

Contingent Upon Award Program
This position is not contingent upon program award

Shift:
Shift 1 (United States of America)

Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning

Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.

EEO is the law

Boeing EEO Policy

Request an Accommodation

Applicant Privacy

Boeing Participates in E - Verify

• E-Verify (English)
• E-Verify (Spanish)

Right to Work Statement

• Right to Work (English)
• Right to Work (Spanish)