Product Security Engineer

Join to apply for the Product Security Engineer role at Boeing in Colorado Springs, Colorado.

At Boeing, we innovate and collaborate to make the world a better place. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunities for professional growth.

Missile Defense Program is seeking motivated and talented Product Security Engineers to support the performance of product security and cybersecurity engineering for the National Team Command, Control, Battle Management and Communications (C2

BMC) Programs & Networks.

• Developing and verifying installation instructions for Cyber Tools and Vendor Patches
• Applying Security Technical Implementation Guides (STIGs)
• Managing and addressing any Cyber Tasking Orders (CTOs) related to the Cyber Tools
• Integrating, configuring and automating the installation of the Elastic Stack with the existing set of Cyber Tools on the C2
  
  BMC system
• Working with various C2
  
  BMC teams to ensure compatibility and seamless integration of Cyber Tools within the larger system
• Documentation and verification of all installation and configuration steps for the labs and operations deliveries
• Providing feedback to Cyber Leadership and engineers to improve the cybersecurity tools and processes
• Verifying the Elastic Stack meets contractual requirements
• Documenting the installation and delivering installation instructions to deploy the Elastic Stack
• Installing, deploying, and unit testing other Cyber Tools such as ACAS, Arc Sight, Big Fix, Delinea, Endgame, ESS, Axway Repeater, and Responder for Windows MFA in National Team labs, the C2
  
  BMC Testbed (CTB), and Operations
• Collaborating with local Information System Security Officers (ISSOs) to ensure compliance with relevant cybersecurity standards and regulations
• Assess organization-wide security and privacy risk and update assessment results on an ongoing basis
• Perform system analysis and develop system test for cyber threats, cyber test activities, and the cybersecurity of large-scale events
• Perform cyber risk assessments and develop risk mitigation plans
• Support the engineering installation & analysis of patches and various system updates and upgrades to determine system consequence of these changes
• Attend, collect data from, out brief, and facilitate collaboration and project management from various program boards
• Support cyber threat intelligence activities
• Support the development and maintenance of cyber scanning, patching, remediation, tools and applications
• Support, as required, TEMPEST, DFARS, COMSEC, CNSSI, and other compliance drivers as needed
• Support and facilitate various ATO packages including processing IAVMs and CTOs for the same
• Perform and/or support the development of tools for cyber forensics
• Develop, define efficiencies and improvements to tools to improve team productivity
• Perform system analysis trade studies to define technical concepts and solutions

• Bachelor of Science degree from an accredited course of study in Engineering, Engineering Technology (includes Manufacturing Engineering Technology), Chemistry, Physics, Mathematics, Data Science, or Computer Science
• Active Top Secret clearance
• Current DoD 8570 certification at IAT Level II / IAM Level I or higher (e.g., Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA)
• 1+ years experience in product security / cybersecurity engineering
• 1+ years experience with industry standard cybersecurity frameworks (NIST, OWASP, DFARS)
• Experience using analytical, collaboration, communication and organizational skills

• 2+ years experience in Windows/RHEL System admin experience, installing, tuning & troubleshooting Cyber Tools to include ESS/HBSS, Config
  
  OS, Splunk/Elastic etc.
• 2+ years experience in configuring, running, and scripting audit tools
• 2+ years experience using knowledge of Software Assurance (SwA) static and/or dynamic code analysis (e.g., Fortify)
• Experience with FISMA/RMF and NIST 800-53 requirements
• Experience leading system and component level cyber test and evaluation, including threat and security assessments and tabletop exercises
• Experienced…