Associate Software Security Engineer

Company:

The Boeing Company is looking for an Associate Software Security Engineer to join the Enterprise Product Security Software organization in Seattle WA or Everett WA to support Secure Coding Certification and Software Assurance across various programs in Boeing Commercial Airplanes (BCA) and Boeing Defense Space and Security (BDS).

The successful candidate will be responsible for driving the development implementation and sustainment of product security and resiliency throughout the software development lifecycle protecting our commercial and military airplanes products and the aviation ecosystem.

As a member of the Enterprise Product Security Software organization you will have support from security experts across all business units and exposure to a large variety of products and services. With a focus on Software Security you will be accountable for the security of software products and pipelines across the worlds leading portfolio of commercial and defense airplanes satellites and weapons.

Position Responsibilities:

• Assess the adversity faced by software subsystems in the context of the larger system

• Secure cloud-based software development environments

• Manage risk in accordance with accepted industry professional and government standards to ensure security design integrity availability confidentiality and regulatory compliance

• Develop security requirements and coordinate with multiple system stakeholders to identify properly implement and verify security measures to mitigate the risks threats and vulnerabilities

• Perform requirements verification on software security engineering products using inspection analysis demonstration and test methods

• Perform Common Vulnerabilities and Exploits (CVE) analysis and coordinate with system stakeholders to appropriately mitigate and address to reduce likelihood and consequences of CVE impacting system operation

• Deploy DevSecOps best practices into Program pipelines including tool selection configuration and analysis

• Provide technical data and develop documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery

• Support Product Security Incident Response Team to respond to security events

• Define and deploy consistent software security standards within the Software Development Lifecycle

• Identify improvements to ensure software implementation is aligned to industry and Boeing software assurance best practices

This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options.

Basic Qualifications (Required Skills/Experience):

• Bachelor of Science degree from an accredited course of study in engineering engineering technology (includes manufacturing engineering technology) chemistry physics mathematics data science or computer science

• Excellent written/oral communication skills to effectively convey cybersecurity concepts across business and technical stakeholders

• 2 years of experience in a role that required teaming and collaboration skills and ability to work well with a geographically dispersed cross-functional and matrix team

• 1 years of experience factoring and applying confidentiality integrity and availability considerations within the software development lifecycle

• Proficient with one or more programming languages (e.g. C CPython)

• 2 years of experience with the Software Development Lifecycle to include implementing DevSecOps principles within CI/CD Pipelines

PreferredQualifications (Desired Skills/Experience):

• 3 years of experience in Product Security or Cybersecurity

• Experience with Systems Security Engineering and breaking down requirements

• Experience in security architectures network security embedded systems security security testing and evaluation network design PKI infrastructure

• Cybersecurity Certifications not limited to Security CISSP CEH etc.

• Knowledge of Secure Software Development Framework (NIST SP 800-218)or CISA Self-Attestation Common Form

• General knowledge of DoD NASA and FAA security requirements related to Product Security

• 2 years of experience in Agile project management

• Experience securing cloud-based infrastructure and architecture (preferably AWS)

• Experience scanning for vulnerabilities implementing and assessing mitigations

Drug Free Workplace:
Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana cocaine opioids amphetamines PCP and alcohol when criteria is met as outlined in our policies.

Union:
This is a union-represented position.

Pay & Benefits:
At Boeing we strive to deliver a Total Rewards package that will attract engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs generally including health insurance flexible spending accounts health savings accounts retirement savings plans life and disability insurance programs and a number of programs that provide for both paid and unpaid time away from work.

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location date of hire and the applicability of collective bargaining agreements.

Pay is based upon candidate experience and qualifications as well as market and business considerations.

Summary pay range: $98600 - $133400

Language Requirements:

Education:

Relocation:

Export Control Requirement:

Safety Sensitive:

Security Clearance:

Visa Sponsorship:

Contingent Upon Award Program

Shift:

Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning