Product Security Engineer, Associate
Position Responsibilities: - Support the development, implementation, and sustainment of product security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle.
- Process and analyze computing and cybersecurity requirements
- Manage and secure DoD information systems ensuring compliance with National Institute of Standards and Technology (NIST) 800-53 and Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs)
- Support research and development activities resulting in innovative solutions.
- Develop Plans of Action and Milestones (POAMs) to address meeting cybersecurity requirements
- Participate in a multidisciplinary range of technical systems and application support activities.
- Support the installation, configuration, and maintenance of multiplatform systems hardware, software, and components
- Ensure security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support.
- Troubleshoot secure network architectures
- Assist as needed in system administration and network administration
- Document, implement, and maintain computer applications
- Assist with evaluation of architecture to ensure compatibility with computing system
- Assist in evaluating systems against architectural objectives
- Support the integration of security and resiliency into products and services throughout the lifecycle of the product/service to meet all applicable certifications and customer requirements.
- Support the research, collection, interpretation, test, and analysis of technical data for system-level product security concepts in the projected operational environments to optimize effectiveness over the program lifecycle.
- Support product security risk/attack surface/vulnerability analyses and security audits of applications and application stacks of various provenances.
- Support the analysis, triage, aggregation, escalation, and reporting of relevant product security and anti-tamper data and other information sources for attack indicators and potential security breaches.
- Assist in coordination during incidents.
- Support the correlation and performance of trend analysis.
- Analyze malware and attacker tactics to improve detection capabilities.
- Prepare and present basic technical reports and briefings.
Basic Qualifications (Required Skills/Experience):- Bachelor's degree from an accredited course of study in engineering, engineering technology, computer science, engineering data science, mathematics, physics, or chemistry, and typically 2 or more years of related work experience, or an equivalent combination of education and experience. In the U.S., ABET accreditation is preferred but not required.
- 2+ years of experience performing cybersecurity functions and supporting computer applications in an operational (mission critical) mode.
- 2+ years of experience performing systems administration and/or network administration tasks to include installation and configuration of servers.
- Possess a minimum of (IAT Level 2) CompTIA Security+, or other relevant cybersecurity certifications.
- Ability to collect, organize, synthesize, and analyze data, and summarize findings, conclusions, and recommendations.
- Experience identifying system susceptibility, survivability, and vulnerability.
- Knowledge of system security domains and applicable industry and government guidance and regulations.
- Ability to communicate effectively with technical personnel across multiple disciplines.
Preferred Qualifications (Desired Skills/Experience):- Certified Information Systems Security Professional (CISSP)
- Demonstrated ability to develop creative solutions to technical problems.
- Demonstrated commitment to quality and safety in technical work environments.
- Knowledge of cyber security incident response protocols, including identification, impact assessment, containment, remediation, evidence handling, and technical reporting.
- Knowledge and understanding of risk management methodology and processes, including trade studies and mitigation planning.
- Ability to effectively utilize risk management tools to support program or project execution.
- Knowledge of engineering disciplines applied to product-related systems throughout the product development life cycle.
- Knowledge of various engineering disciplines such as electrical, mechanical, and systems.
Preferred Technical / Environment Experience: - SIPRNet configuration and compliance experience
- SIPR Cyber Operational Readiness Assessment (CORA) audit preparation experience
- Assured Compliance Assessment Solution (ACAS) experience or certification
- Red Hat Linux and Windows workstation/server environments
- VMware ESXi and vCenter experience
- Data Domain and Unity storage experience
- Dell EMC Networker backup experience
- Trellix ePO (ePolicy Orchestrator) experience
- SolarWinds Platform experience
- Splunk experience
- Microsoft SQL Server experience
This position requires a minimum U.S. Secret Security Clearance for which the U.S. Government requires U.S. Citizenship, with the ability to obtain and maintain a final U.S. Top Secret Clearance post-start. In order to meet security standards and protocols, all work is performed onsite in Huntington Beach, CA.Drug Free Workplace:Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.
Shift: This role is primarily first shift; however, there may be additional shift requirements to support program objectives.
401k Plan:The Boeing 401(k) helps you save for your future, with contributions from Boeing that can help you grow your retirement savings. Our best-in-class retirement benefit features:
- Best in class 401(k) plan: we'll match your contributions dollar for dollar, up to 10% of eligible pay with Immediate 100% vesting
- Student Loan Match: The Boeing 401(k) Student Loan Match allows eligible enrolled U.S. employees to have their qualified student loan debt payments counted, along with any match-eligible contributions they make, for purposes of determining the Company Match to employees' Boeing 401(k) accounts.
Pay & Benefits: At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.
The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.
Pay is based upon candidate experience and qualifications, as well as market and business considerations.
Summary Pay Range (Associate-Level - Level 2): $108,000 - $147,200
Language Requirements:Not Applicable
Education:Bachelor's Degree or Equivalent
Relocation:Relocation assistance is not a negotiable benefit for this position.
Export Control Requirement:This is not an Export Control position.
Safety Sensitive:This is not a Safety Sensitive Position.
Security Clearance:This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
Visa Sponsorship:Employer will not sponsor applicants for employment visa status.
Contingent Upon Award ProgramThis position is not contingent upon program award
Shift:Shift 1 (United States of America)
Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning
