Cyber A&A Engineer

Cyber A&A Engineer

Company:

The Boeing Company

The Boeing Company is seeking a Cyber A&A Engineer in Colorado Springs CO.

Boeings Missile Defense Program is seeking motivated and talented professionals to join its team supporting the National Team Command Control Battle Management and Communications (C2BMC) Programs & Networks.

Position Responsibilities:

• Process and track DD Form 2875 user account forms and required training for privileged and non-privileged accounts perform annual validation of accounts and work with system administrator on creation modification and removal of accounts

• Perform assessment of systems and networks within a virtual environment and identify where those systems deviate from acceptable configurations enclave policy or local policy. This is achieved through passive evaluations such as compliance audits using STIG Viewer SCAP etc. and active evaluations such as vulnerability assessments utilizing ACAS.

• Perform Security Technical Implementation Guide (STIG) assessments and hardening for both Windows Red Hat Enterprise Linux (RHEL) systems and networking equipment utilizing ConfigOS

• Develop test plans reflecting how STIG checks are implemented and be able to show expected outcomes of those checks

• Update Risk Management Framework (RMF) artifact documentation to ensure system hardening non-compliant is tracked and remediated.

• Establish strict program control processes to ensure mitigation of risks and supports obtaining assessment and authorization of systems. Includes support of process analysis coordination control certification test compliance documentation as well as investigations software research hardware introduction and release emerging technology research inspections and periodic audits.

• Assist in the implementation of the required government policy (i.e. NISPOM NIST DoD) making recommendations on process tailoring participating in and documenting process activities.

• Perform analyses to validate established cybersecurity controls and requirements and to recommend cybersecurity safeguards.

• Support program test milestones through pre-test preparations participating in the tests analysis of the results and preparation of required artifacts supporting authorization.

• Prepare artifacts such as Test Results (TR) Authorization Boundary Diagrams (ABD) Network Topologies Flow-diagrams Hardware and Software listings Ports Protocols and Services Management documentation supporting Assessment and Authorization activities and maintaining the Plan of Actions and Milestones (POA&M).

• Periodically conduct a complete review of each program support and operational systems audits and monitor corrective actions until all actions are closed.

• Coordinate across the program to address identified deficiencies during RMF assessment activities.

This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options. (Colorado Springs CO.)

This position may require the ability to obtain access to an MDA facility. Access to the facility requires a background investigation by U.S. government authorities.

This position requires candidate acceptance by industry partner resource control board.

This position requires an active Top Secret U.S. Security Clearance. (A U.S. Security Clearance that has been active in the past 24 months is considered active.)

Basic Qualifications (Required Skills/Experience):

• Bachelor of Science degree in Engineering Engineering Technology (including Manufacturing Technology) Computer Science Data Science Mathematics Physics Chemistry or non-US equivalent qualifications directly related to the work the USA ABET accreditation is the preferred although not required accreditation standard.
• Minimum 5 or more years related work experience.
• IAT Level II/ IAM Level I DoD 8570 certification (CompTIA Security CE or equivalent)
• Security engineering skills with a working knowledge of cybersecurity technology and DoD/Federal cybersecurity policy (i.e. DoDI 8500.01 NIST SP 800-53 etc.).
• Understanding and utilization of Enterprise Mission Assurance Support Service (eMASS)
• Understanding of Risk Management Framework (RMF) Cybersecurity Lifecycle to include: identifying controls and overlays generating testable requirements identifying resilient architecture design configuring running and scripting audit tools providing analysis of vulnerability analyses conducting verification testing for compliance assessment.
• Knowledge of Software Assurance (SwA) static and dynamic code analysis (e.g. Fortify/SonarQube)

Preferred Qualifications (Desired Skills/Experience):

• Windows and Red Hat Enterprise Linux (RHEL) system administration skills
• Previous background working in a virtual environment.
• Previous background working with dockers and containers
• Administer ACAS and ESS (formally HBSS)
• Previous experience with ConfigOS

Drug Free Workplace:

Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana cocaine opioids amphetamines PCP and alcohol when criteria is met as outlined in our policies.

Relocation:

This position does not offer relocation. Candidates must be local or willing to relocate at their own expense.

401k Plan:

The Boeing 401(k) helps you save for your future with contributions from Boeing that can help you grow your retirement savings. Our best-in-class retirement benefit features:

• Best in class 401(k) plan: well match your contributions dollar for dollar up to 10% of eligible pay with Immediate 100% vesting

• Student Loan Match: The Boeing 401(k) Student Loan Match allows eligible enrolled U.S. employees to have their qualified student loan debt payments counted along with any match-eligible contributions they make for purposes of determining the Company Match to employees Boeing 401(k) accounts.

Employee Referral Eligibility:

$1500 is the projected amount to offer for employee referral bonuses for this position.

Pay & Benefits:

At Boeing we strive to deliver a Total Rewards package that will attract engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs generally including health insurance flexible spending accounts health savings accounts retirement savings plans life and disability insurance programs and a number of programs that provide for both paid and unpaid time away from work.

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location date of hire and the applicability of collective bargaining agreements.

Please note that the salary information shown below is a general guideline only. Salaries are based upon candidate experience and qualifications as well as market and business considerations.

Summary Pay Range (Mid-Level - Level 3): $128350 - $173650

Language Requirements:

Not Applicable

Education:

Not Applicable

Relocation:

Relocation assistance is not a negotiable benefit for this position.

Export Control Requirement:

This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements a U.S. Person as defined by 22 C.F.R. 120.62 is required. U.S. Person includes U.S. Citizen U.S. National lawful permanent resident refugee or asylee.

Safety Sensitive:

This is not a Safety Sensitive Position.

Security Clearance:

This position requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)

Visa Sponsorship:

Employer will not sponsor applicants for employment visa status.

Contingent Upon Award Program

This position is not contingent upon program award

Shift:

Shift 1 (United States of America)

Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning