Senior Product Security Engineer - Avionics Development

About the role

The successful candidate will be responsible for the development, implementation, and sustainment of product cyber security and resiliency engineering for avionics through requirements, design, analysis, build, test, production, operations, support and sustainment. They will lead the Product Security Engineering Organization, which is a growing multi-disciplinary cybersecurity engineering organization that is committed to the cyber security and resiliency of Boeing's products, platforms, and services.

Responsibilities

• Lead the development, implementation, and sustainment of product security for Boeing avionics systems, throughout the requirements, design, analysis, build, test, production, operations, support and sustainment lifecycle
• Coordinate with platforms and system-of-systems product security counterparts for requirements, activities, artifacts, and solutions
• Coordinate with other engineering stakeholders – systems, software, and hardware – advising on the results of security analysis – to develop secure architectures and designs
• Lead, establish, and integrate standards and processes for product security engineering for avionics development, and to meet applicable program and certification requirements
• Utilize the Risk Engineering digital thread to inform product requirements surrounding cyber survivability against specified cyber threats – by performing criticality, adversity, threat analysis for avionics systems
• Assess internal customer requirements to derive strategies and detailed security requirements system and technical requirements
• Execute PSE activities – security requirements, architectures, risk assessments
• Document PSE activities and deliver PSE artifacts
• Lead risk reduction and technology maturation activities resulting in innovative solutions in product and services offering
• Identify and elevate product security risks to integrated product team(s) and management

Requirements

• Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
• 9+ years of related work experience or an equivalent combination of education and experience
• Experience with commercial and/or military aircraft avionics
• Experience in deriving technical requirements from customer input or eliciting customer requirements
• Experience solving complex business problems and delivering solutions via technology
• Knowledge of security practices and principles associated with risk analysis and assessment

Qualifications

• Active technical security certification (ex. ISC2 – International Information System Security Certification, CISSP – Certified Information Systems Security Professional, GIAC - Global Information Assurance Certification)
• Experience designing, supporting, or executing AI, data, privacy, cybersecurity, or other technology risks assessments and translating findings into practical controls and process improvements
• Experience in security domain, e.g. defining penetration testing, architecting product security posture
• Experience working with and/or developing embedded systems
• Experience in the field of Cybersecurity, anti-tamper and/or secure computing and knowledge of Department of Defense (DoD) policies and requirements related to Cybersecurity
• Active U.S. Security Clearance in the past 24 months