Associate or Mid-Level Software Security Engineer

Associate or Mid-Level Software Security Engineer at Boeing summary:

Boeing seeks an Associate or Mid-Level Software Security Engineer to support secure coding, certification, and software assurance for commercial airplane programs, focusing on product security across the software development lifecycle. Responsibilities include threat and CVE analysis, Dev Sec Ops  pipeline integration, security requirements development and verification, incident response support, and ensuring compliance with industry and government standards. The role requires a relevant STEM bachelor's degree, experience in software development/Dev Sec Ops , and U.S. Person status with ability to obtain U.S. security clearance.

Job Description

At Boeing, we innovate and collaborate to make the world a better place. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

The Boeing Company is looking for an Associate (Level
2) or Mid-Level (Level
3)
Software Security Engineer to join the Enterprise Product Security Software organization onsite in Seattle, WA or Everett, WA , to support Secure Coding, Certification, and Software Assurance across various programs in Boeing Commercial Airplanes (BCA).

The successful candidate will be responsible for driving the development, implementation, and sustainment of product security and resiliency throughout the software development lifecycle, protecting our commercial airplanes’ products and the aviation ecosystem.

As a member of the Enterprise Product Security Software organization, you will have support from security experts across all business units, and exposure to a large variety of products and services. With a focus on Software Security, you will be accountable for the security of software products and pipelines across the world's leading portfolio of commercial airplanes.

Primary responsibilities:

• Assess the adversity faced by software subsystems in the context of the larger system
• Secure cloud-based software development environments
• Manage risk in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance
• Develop security requirements and coordinate with multiple system stakeholders to identify and properly implement and verify security measures to mitigate the risks, threats and vulnerabilities
• Perform requirements verification on software security engineering products using inspection, analysis, demonstration, and test methods
• Perform Common Vulnerabilities and Exploits (CVE) analysis and coordinate with system stakeholders to appropriately mitigate and address to reduce likelihood and consequences of CVE impacting system operation
• Deploy Dev Sec Ops  best practices into Program pipelines, including tool selection, configuration, and analysis
• Provide technical data and develop documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery
• Support Product Security Incident Response Team to respond to security events
• Define and deploy consistent software security standards within the Software Development Lifecycle
• Identify improvements to ensure software implementation is aligned to industry and Boeing software assurance best practices

Basic Qualifications (Required Skills and Experience):

• Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
• Level 2: 2+ years of related work experience or an equivalent combination of education and experience
• Level 3: 5+ years of related work experience or an equivalent combination of education and experience
• 2+ years of experience in a role that required teaming and collaboration skills, and ability to work well with a geographically dispersed cross-functional and matrix team
• 1+ years of experience factoring and applying confidentiality, integrity and…