Boeing
Overview
Boeing Engineering is actively seeking a Product Security Engineer (Cybersecurity) to join our Factory & Operational Technology (OT) Product Security Engineering (PSE) team in Everett or Seattle, WA. This role offers a rare opportunity to work at the forefront of efforts to ensure that our factories—producing products ranging from commercial airplanes to satellites and autonomous submersibles—continue to be secure and resilient from cyber threats. The role blends technical execution, stakeholder coordination, and mentorship to strengthen Boeing’s resilient manufacturing operations. This position is onsite. Position Responsibilities
Develop and enhance the enterprise OT Vulnerability Management Program to deploy OT aware scanning and patching tooling across targeted OT environments such as production equipment, facilities, and labs Implement continuous asset discovery and credentialed/passive vulnerability scanning with centralized ingestion to Boeing SIEM and consolidated reporting Formalize the OT Security lifecycle workflows with risk-based prioritization, ticketing and verification workflows, exception documentation, and compensating control processes Design, build, and validate a safe patching infrastructure, including vendor sourcing, patch staging, test lab validation, deployment orchestration, rollback procedures, and change control coordination Create and maintain procedures for reproducing, testing, and validating OT vulnerabilities using deployed tooling to ensure reliable remediation and verification Coordinate with cross functional stakeholders (manufacturing, IT, safety, vendors) to implement mitigations, minimize operational impact, track program metrics and continuously improve Support incident response (IR) and root‑cause analysis for OT security events, including coordination with the IR team, safety, and operations teams Mentor junior engineers and participate in cross‑functional design reviews Contribute to roadmaps, budget justification, and vendor evaluations to evolve the OT security program Basic Qualifications (Required Skills/Experience)
Bachelor of Science degree from an accredited program in Engineering, Engineering Technology, Computer Science, Data Science, Mathematics, Physics, or Chemistry Deep understanding of cybersecurity controls, frameworks, and the vulnerability management lifecycle Experience in design, management, and troubleshooting of industrial control systems Proven experience in hardening both Windows and Linux operating systems Working knowledge of vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS) Working knowledge of a source control tool (e.g., GIT, Subversion, CVS) Working knowledge of cloud security in major cloud platforms (AWS, Azure, Google Cloud) Working knowledge of a programming or scripting language (e.g., Python, C++, Java) Experience in architecture, design, management, administration and troubleshooting of networks with a focus on security controls and firewall administration Preferred Qualifications (Desired Skills/Experience)
Senior: 5+ years related work experience or an equivalent combination of education and experience Knowledge of cybersecurity vulnerability assessments, risk assessments, threat models, architecture, and procedures Experience with PowerShell, Bash, Ladder Logic, and Structured Text Understanding of NIST 800-series guidelines Cybersecurity certifications such as Security+, CySA+, CISSP, CEH Experience participating in an incident response team Knowledge in systems engineering and system integration Experience as a DevOps/DevSecOps engineer Experience in authoring engineering design and process documents Excellent leadership, technical communication, and documentation skills Other Information
Drug Free Workplace: Boeing is a Drug Free Workplace; post-offer applicants and employees are subject to testing as outlined in policy. Union: This is a union-represented position. Pay & Benefits: Boeing offers a Total Rewards package including base pay, variable compensation, and a comprehensive benefits program. Specific programs vary by location and eligibility. Applications: Applications for this position will be accepted until Oct. 10, 2025. Export Control Requirements: This position requires US Person status as defined by 22 C.F.R. 120.15. Education: Bachelor’s Degree or equivalent required. Relocation: This position offers relocation based on candidate eligibility. Visa Sponsorship: Boeing will not sponsor applicants for employment visa status. Shift: This position is for 1st shift. Equal Opportunity Employer
Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, disability, genetic factors, military/veteran status or other characteristics protected by law.
#J-18808-Ljbffr
Boeing Engineering is actively seeking a Product Security Engineer (Cybersecurity) to join our Factory & Operational Technology (OT) Product Security Engineering (PSE) team in Everett or Seattle, WA. This role offers a rare opportunity to work at the forefront of efforts to ensure that our factories—producing products ranging from commercial airplanes to satellites and autonomous submersibles—continue to be secure and resilient from cyber threats. The role blends technical execution, stakeholder coordination, and mentorship to strengthen Boeing’s resilient manufacturing operations. This position is onsite. Position Responsibilities
Develop and enhance the enterprise OT Vulnerability Management Program to deploy OT aware scanning and patching tooling across targeted OT environments such as production equipment, facilities, and labs Implement continuous asset discovery and credentialed/passive vulnerability scanning with centralized ingestion to Boeing SIEM and consolidated reporting Formalize the OT Security lifecycle workflows with risk-based prioritization, ticketing and verification workflows, exception documentation, and compensating control processes Design, build, and validate a safe patching infrastructure, including vendor sourcing, patch staging, test lab validation, deployment orchestration, rollback procedures, and change control coordination Create and maintain procedures for reproducing, testing, and validating OT vulnerabilities using deployed tooling to ensure reliable remediation and verification Coordinate with cross functional stakeholders (manufacturing, IT, safety, vendors) to implement mitigations, minimize operational impact, track program metrics and continuously improve Support incident response (IR) and root‑cause analysis for OT security events, including coordination with the IR team, safety, and operations teams Mentor junior engineers and participate in cross‑functional design reviews Contribute to roadmaps, budget justification, and vendor evaluations to evolve the OT security program Basic Qualifications (Required Skills/Experience)
Bachelor of Science degree from an accredited program in Engineering, Engineering Technology, Computer Science, Data Science, Mathematics, Physics, or Chemistry Deep understanding of cybersecurity controls, frameworks, and the vulnerability management lifecycle Experience in design, management, and troubleshooting of industrial control systems Proven experience in hardening both Windows and Linux operating systems Working knowledge of vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS) Working knowledge of a source control tool (e.g., GIT, Subversion, CVS) Working knowledge of cloud security in major cloud platforms (AWS, Azure, Google Cloud) Working knowledge of a programming or scripting language (e.g., Python, C++, Java) Experience in architecture, design, management, administration and troubleshooting of networks with a focus on security controls and firewall administration Preferred Qualifications (Desired Skills/Experience)
Senior: 5+ years related work experience or an equivalent combination of education and experience Knowledge of cybersecurity vulnerability assessments, risk assessments, threat models, architecture, and procedures Experience with PowerShell, Bash, Ladder Logic, and Structured Text Understanding of NIST 800-series guidelines Cybersecurity certifications such as Security+, CySA+, CISSP, CEH Experience participating in an incident response team Knowledge in systems engineering and system integration Experience as a DevOps/DevSecOps engineer Experience in authoring engineering design and process documents Excellent leadership, technical communication, and documentation skills Other Information
Drug Free Workplace: Boeing is a Drug Free Workplace; post-offer applicants and employees are subject to testing as outlined in policy. Union: This is a union-represented position. Pay & Benefits: Boeing offers a Total Rewards package including base pay, variable compensation, and a comprehensive benefits program. Specific programs vary by location and eligibility. Applications: Applications for this position will be accepted until Oct. 10, 2025. Export Control Requirements: This position requires US Person status as defined by 22 C.F.R. 120.15. Education: Bachelor’s Degree or equivalent required. Relocation: This position offers relocation based on candidate eligibility. Visa Sponsorship: Boeing will not sponsor applicants for employment visa status. Shift: This position is for 1st shift. Equal Opportunity Employer
Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, disability, genetic factors, military/veteran status or other characteristics protected by law.
#J-18808-Ljbffr