Address
Form of workJob Description
Job Description: Active Secret// OnsiteWork Location Huntsville, AL
As a Product Security Engineer, you will develop, implement, and sustain Product Security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle. Develop and enhance system requirements and architectures for Product Security to meet all applicable certification and customer requirements. Ensure security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support. Define and identify Product Security requirements for suppliers of components and subsystems for integration into Boeing products and services. Coordinate with governments, customers, suppliers, and industry to identify risks and improve industry and regulatory security standards and requirements for programs and interfacing systems. Conduct research and development activities resulting in innovative solutions.
A Product Security Engineer supports multiple aspect of the Product Security Engineering lifecycle to ensure system resiliency and regulatory compliance.
Product Security Engineer responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify lifecycle balanced information system security solutions.
Identifies product assets risks, threats, and vulnerabilities in accordance with accepted industry, professional, and government standards, ensuring security design integrity, availability, confidentiality, non-repudiation and contract compliance.
Coordinates with systems engineers, system administrators, network and software engineers, test and validation engineers, and program management on security related activities and requirements.
Assess risks, threats and vulnerabilities of the product assets and production systems in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance.
Perform requirements verification on system Security Engineering products using inspection, analysis, demonstration, and test methods.
Execute recurring and maturing Product Security Engineering analysis, design, implementation, and test across the SITR program and teams, and responsible engineers in partner teams.
Develop comprehensive assessment-based reports detailing system security findings, and recommendation to increase overall system security posture.
Perform incremental criticality, adversity, and threat analysis on complex, highly technical systems.
Collaborate on design & development strategy with responsible engineers for traceable mitigations, including design constraints and concepts to minimize risk and vulnerability and increase GMD system resiliency and assurance.
Champion and Participate fully in Agile planning and execution.
Requirements
Secret clearance-US prestart
DoD 8570 IAT/IAM Level II Certificate or higher IAT/IAM level.
This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship.
This position requires clearing a background check and an enhanced Personal Conflict of Interest (PCI) requirements as a condition for employment.
Desired Experience:
Risk Management Framework process along with both the NIST and DOD standards for RMF
Experience with ACAS and eMASS applications and processes.
Experience with IBM DOORS, or other requirements management programs.
Various cyber related compliance standards: TEMPEST, DFARS Clause ***, COMSEC, CNSSI 1253, DOD 8570, NIST 800-160, NIST 800-53 (and 53A), NIST 800-30, NIST 800-171, NIST 800-55, NIST 800-137, NIST 800-39.)
Excellent team player with strong written and oral communication skills
Confident in a fast-paced environment with competing priorities, and able to multi-task and manage expectations.
Education/experience
Typically acquired through advanced technical education from an accredited course of study in engineering, computer science, mathematics, physics or chemistry (e.g. Bachelor) and typically 2 or more years' related work experience (e.g. PhD, Master+3 years' related work experience). In the USA, ABET accreditation is the preferred, although not required, accreditation standard.
Ability to pass Background and Drug Screen if Required by Client
As a Product Security Engineer, you will develop, implement, and sustain Product Security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle. Develop and enhance system requirements and architectures for Product Security to meet all applicable certification and customer requirements. Ensure security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support. Define and identify Product Security requirements for suppliers of components and subsystems for integration into Boeing products and services. Coordinate with governments, customers, suppliers, and industry to identify risks and improve industry and regulatory security standards and requirements for programs and interfacing systems. Conduct research and development activities resulting in innovative solutions.
A Product Security Engineer supports multiple aspect of the Product Security Engineering lifecycle to ensure system resiliency and regulatory compliance.
Product Security Engineer responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify lifecycle balanced information system security solutions.
Identifies product assets risks, threats, and vulnerabilities in accordance with accepted industry, professional, and government standards, ensuring security design integrity, availability, confidentiality, non-repudiation and contract compliance.
Coordinates with systems engineers, system administrators, network and software engineers, test and validation engineers, and program management on security related activities and requirements.
Assess risks, threats and vulnerabilities of the product assets and production systems in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance.
Perform requirements verification on system Security Engineering products using inspection, analysis, demonstration, and test methods.
Execute recurring and maturing Product Security Engineering analysis, design, implementation, and test across the SITR program and teams, and responsible engineers in partner teams.
Develop comprehensive assessment-based reports detailing system security findings, and recommendation to increase overall system security posture.
Perform incremental criticality, adversity, and threat analysis on complex, highly technical systems.
Collaborate on design & development strategy with responsible engineers for traceable mitigations, including design constraints and concepts to minimize risk and vulnerability and increase GMD system resiliency and assurance.
Champion and Participate fully in Agile planning and execution.
Requirements
Secret clearance-US prestart
DoD 8570 IAT/IAM Level II Certificate or higher IAT/IAM level.
This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship.
This position requires clearing a background check and an enhanced Personal Conflict of Interest (PCI) requirements as a condition for employment.
Desired Experience:
Risk Management Framework process along with both the NIST and DOD standards for RMF
Experience with ACAS and eMASS applications and processes.
Experience with IBM DOORS, or other requirements management programs.
Various cyber related compliance standards: TEMPEST, DFARS Clause ***, COMSEC, CNSSI 1253, DOD 8570, NIST 800-160, NIST 800-53 (and 53A), NIST 800-30, NIST 800-171, NIST 800-55, NIST 800-137, NIST 800-39.)
Excellent team player with strong written and oral communication skills
Confident in a fast-paced environment with competing priorities, and able to multi-task and manage expectations.
Education/experience
Typically acquired through advanced technical education from an accredited course of study in engineering, computer science, mathematics, physics or chemistry (e.g. Bachelor) and typically 2 or more years' related work experience (e.g. PhD, Master+3 years' related work experience). In the USA, ABET accreditation is the preferred, although not required, accreditation standard.
Ability to pass Background and Drug Screen if Required by Client
