Associate Level Product Security Engineer - PE (System Security Engineer)

Why This is an Exciting Role:

As a Product Security Engineer:

• You will support developing, implementing, and sustaining product security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle.
• You will support developing and enhancing system requirements and architectures for product security to meet all applicable certification and customer requirements.
• You will ensure the safety of facilities, equipment, tools, data, networks, and resources used for a product: design, development, build, test, storage, delivery, operations, and support.
• You will support defining and identifying product security requirements for suppliers of components and subsystems for integration into Boeing products and services.
• You will coordinate with governments, customers, suppliers, and the industry at a low level to identify risks and improve the industry and regulatory security standards and requirements for programs and interfacing systems.
• You will support research and development activities resulting in innovative solutions. You will support the advisement of customers on maintaining product security and certification, including the security consequences of modifying products and services.

A Product Security Engineer supports multiple aspects of the Product Security Engineering lifecycle (e.g., Engineering V) to ensure system resiliency and regulatory compliance. Additional tasks include:

• Applies an interdisciplinary, collaborative approach to plan, design, develop, validate, and verify lifecycle-balanced information system security solutions.
• Identifies product assets risks, threats, and vulnerabilities in accordance with accepted industry, professional, and government standards, ensuring security design integrity, availability, confidentiality, non-repudiation, and contract compliance.
• Coordinates with systems engineers, system administrators, network and software engineers, test and validation engineers, and program management on security-related activities and requirements.
• Assess risks, threats, and vulnerabilities of the product assets and production systems in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance.
• Performs requirement verification on system security engineering products using inspection, analysis, demonstration, and test methods.
• Executes recurring and maturing Product Security Engineering analysis, design, implementation, and test across the program and teams, and responsible engineers in partner teams.
• Develops comprehensive assessment-based reports detailing system security findings and recommendations to increase overall system security posture.
• Performs incremental criticality, adversity, and threat analysis on complex, highly technical systems.
• Collaborates on design & development strategy with responsible engineers for traceable mitigations, including design constraints and concepts to minimize risk and vulnerability and increase system resiliency and assurance.
• Champions and participates entirely in Agile planning and execution.

What Makes BI&A Different:

As a fully owned subsidiary of The Boeing Company, BI&A offers an optimal mix of a small company environment with exceptional opportunities supported by a large corporation.

Every day, Boeing Intelligence & Analytics supports global missions by building and delivering intelligence, analytics, and cyber solutions that enable users to advance national security. From hardware and software engineering solutions to analytics that keep this nation safe, we create value that meets users’ needs. With vibrant partnerships and innovative approaches, we serve the Intelligence Community through innovation and vision. We have provided our customers with the tools needed to counter evolve global and cyber threats, and to improve wartime decision-making.

• Our talented employees bring software development, systems engineering, and advanced analytics expertise.
• We offer numerous prime contract opportunities with customers headquartered in Maryland, Virginia, and the District of Columbia, as well as subcontract opportunities that align with our areas of focus and additional opportunities nationwide through our parent company.
• We have current open positions on awarded programs across diverse customer sets and are anticipating upcoming contract awards with a 5-year life cycle and an additional 5 option years.
• Our diverse portfolio allows our employees to move to other projects and teams as they gain further proficiency in their current skill set and learn new skill sets along the way.
• We offer hands-on access to cutting-edge technologies and a culture of technical excellence. 

Experience and Qualifications:

To be eligible for this demanding position, the ideal candidate should demonstrate the following experience and qualifications:

Required Education and Years of Experience:

• Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, computer science, mathematics, physics, or chemistry (e.g., Bachelor) and typically two or more years related work experience or an equivalent combination of technical education and experience (e.g., Master). In the USA, ABET accreditation is the preferred, although not required, accreditation standard.

Required Qualifications: ​

• Bachelor's Degree and/or Military experience and/or Combination of education and work experience equivalent to 6 years.
• Secret clearance-US prestart
• DoD 8570 IAT/IAM Level II Certificate or higher

Desired Qualifications:

• Risk Management Framework process, along with both the NIST and DoD standards for RMF
• Experience with eMASS applications and processes.
• Experience with requirements management programs.
• Various cyber-related compliance standards: TEMPEST, DFARS Clause 252.204-7012, COMSEC, CNSSI 1253, DoD 8570, DoD 8140, NIST 800-160, NIST 800-53 (and 53A), NIST 800-30, NIST 800-171, NIST 800-55, NIST 800-137, NIST 800-39.
• Excellent team player with strong written and oral communication skills
• Confident in a fast-paced environment with competing priorities and able to multi-task and manage expectations.
• Ability to engage and execute projects as an individual
• Previous experience as an ISSO/ISSM/ISSE

Telework Availability: None

This position requires the ability to obtain a US Security Clearance for which the US Government requires US Citizenship as a condition of employment. ( An interim and/or final U.S. Secret Clearance Pre-Start is required.)

This position requires clearing a background check and an enhanced Personal Conflict of Interest (PCI) requirements as a condition for employment.

Summary Pay Range:

Please note that the information shown below is a general guideline only. Pay is based upon candidate experience and qualifications, as well as market and business considerations.

$86,400 - $118,800