Mid-Level Software Security Engineer

Boeing; Seattle (WA); On-site; USD 138,000 - 186,000; Full time

Job summary

Boeing is seeking a Mid-Level Software Security Engineer in Seattle, WA or Everett, WA to join the Enterprise Product Security Software organization. You will drive secure coding, certification, and software assurance across programs in Boeing Commercial Airplanes.

You will lead security requirements, collaborate with system stakeholders, and deploy DevSecOps practices to protect software throughout the lifecycle, with exposure to a diverse portfolio of avionics and defense products.

Qualifications

• BS degree in engineering, engineering tech, CS, data science, math, physics or related field.
• 5+ years of related work experience.
• 1+ years applying confidentiality, integrity and availability in the SDLC.
• Experience with the Software Development Lifecycle (SDLC).

Responsibilities

• Assesses the adversity faced by software subsystems within the larger system.
• Secures cloud-based software development environments.
• Manages risk per industry, professional, and government standards to ensure security design integrity, availability, confidentiality and compliance.
• Develops security requirements and coordinates with stakeholders to implement security measures.
• Performs requirements verification on security engineering products using inspections and tests.
• Performs CVE analysis and coordinates mitigations with stakeholders.
• Deploys DevSecOps practices into program pipelines, including tool selection and configuration.
• Provides technical data and documentation for internal and external delivery.
• Supports Product Security Incident Response Team to respond to security events.
• Defines and deploys consistent software security standards within the SDLC.
• Identifies improvements to align software with Boeing best practices.

Skills

SDLC experience

CIA triad (confidentiality, integrity,

Education

Bachelor's Degree in Engineering/Engineering Technology/CS

Tools

PKI / HSM

Job description

Job Description

At Boeing, we innovate and collaborate to make the world a better place. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

The Boeing Company is looking for a Mid-Level Software Security Engineer to join the Enterprise Product Security Software organization in Seattle, WA or Everett, WA, to support Secure Coding, Certification, and Software Assurance across various programs in Boeing Commercial Airplanes (BCA).

The successful candidate will be responsible for driving the development, implementation, and sustainment of product security and resiliency throughout the software development lifecycle, protecting our commercial airplanes’ products and the aviation ecosystem.

As a member of the Enterprise Product Security Software organization, you will have support from security experts across all business units, and exposure to a large variety of products and services. With a focus on Software Security, you will be accountable for the security of software products and pipelines across the world's leading portfolio of commercial and defense airplanes, satellites and weapons.

Position Responsibilities

• Assesses the adversity faced by software subsystems in the context of the larger system
• Secures cloud-based software development environments
• Manages risk in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance
• Develops security requirements and coordinate with multiple system stakeholders to identify and properly implement and verify security measures to mitigate the risks, threats and vulnerabilities
• Performs requirements verification on software security engineering products using inspection, analysis, demonstration, and test methods
• Performs Common Vulnerabilities and Exploits (CVE) analysis and coordinate with system stakeholders to appropriately mitigate and address to reduce likelihood and consequences of CVE impacting system operation
• Deploys DevSecOps best practices into Program pipelines, including tool selection, configuration, and analysis
• Provides technical data and develop documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery
• Supports Product Security Incident Response Team to respond to security events
• Defines and deploys consistent software security standards within the Software Development Lifecycle
• Identifies improvements to ensure software implementation is aligned to industry and Boeing software assurance best practices

Basic Qualifications (Required Skills and Experience)

• Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement
• 5+ years of related work experience or an equivalent combination of education and experience
• 1+ years of experience factoring and applying confidentiality, integrity and availability considerations within the system development lifecycle
• Experience with the Software Development Lifecycle (SDLC)

Preferred Qualifications (Desired Skills and Experience)

• Experience with system security engineering or systems engineering
• Experience with security infrastructure, product and cybersecurity systems analysis, design, development, and testing
• Working knowledge in Public Key Infrastructure operations through hardware security modules, certificate authorities and all supporting hardware and software
• Experience with DevSecOps and Continuous Integration and Continuous Deployment (CI/CD) tools and execution

Drug Free Workplace

Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.

Pay & Benefits

At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

Pay is based upon candidate experience and qualifications, as well as market and business considerations.

Summary Pay Range: $137,700 - $186,300

Export Control Requirements

This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R.

• 120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Export Control Details

US based job, US Person required

Education

Bachelor's Degree or Equivalent Required

Relocation

This position offers relocation based on candidate eligibility.

Visa Sponsorship

Employer will not sponsor applicants for employment visa status.

Shift

This position is for 1st shift

Equal Opportunity Employer

Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.