Senior Offensive Security Engineer

Senior Offensive Security Engineer

Company:

The Boeing Company

Job ID:

00000429113

Date Posted:

2024-06-12

Location:

USA - Berkeley, MO

Job Description Qualifications:

The Boeing Company seeks a Senior Offensive Security Engineer to support the Boeing Test & Evaluation (BT&E) cyber test capability. The selected applicant will join a highly technical Enterprise Test & Evaluation team building an offensive cyber test capability in Berkeley, MO.

This position will be providing testing services to Boeing Defense Space & Security (BDS) portfolio.  The primary responsibilities will include Product Security (Cyber) test planning, integration, and execution, mission-based risk assessments, vulnerability assessments, and penetration tests.  The Selected applicant will become a St. Louis team member trained across the broader BT&E enterprise Product Security Capability team with the opportunity to also contribute in innovation efforts advancing adversarial testing.

In addition to the specific program responsibilities, the selected candidates will be joining the growing BT&E Product Security Engineering Capability with established teams in Seattle, WA and Huntsville, AL.

Position Responsibilities Include:

• Lead execution of penetration tests to identify, exploit, and assess a target system’s vulnerabilities in a threat-representative manner
• Subject Matter Expert for emulating advanced cyber adversary tactics, techniques and procedures (TTPs)
• Perform Operational Technology (OT) penetration testing and assessment as cyber Opposing Forces (OPFOR) for exercises simulating cyber threat actor capabilities
• Lead controlled attack simulations that test the effectiveness of a blue team and its capabilities to detect, block, and mitigate attacks and breaches
• Develop exploits and malware targeting modern operating systems and defenses
• Conduct reverse engineering activities
• Execute penetration tests on modern Windows and Linux operating systems and IP-based networks
• Support the development of cyber test tools as necessary to achieve threat emulation objectives
• Communicate recommendations for improvements via reports or presentations to customers using common frameworks such as MITRE ATT&CK, Cyber Kill Chain, etc.
• Participate in event design and development for cyber training objectives

This position is hybrid.  This means that the selected candidate will be required to perform some work onsite at one of the listed location options.  This is at the hiring team’s discretion and could potentially change in the future.

This position requires an active Secret U.S. Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active.)

Basic Qualifications (Required Skills/Experience):

• Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science    
• 5+ years of experience planning and executing penetration testing of either IT based systems or Avionics embedded systems
• Experience in system and software architectures
• Experience programming with C, C++, Python and/or shell scripts

Preferred Qualifications (Desired Skills/Experience):

• Experience leading teams on programs/projects
• Demonstrated ability to engage with stakeholders to define/plan/resource/deliver solutions
• Experience designing and/or testing product systems
• Experience working with Product Security (non-IT) Cyber Compliance and/or Avionics Embedded systems risk management assessment
• Experience facilitating and/or supporting Cyber Table Top (or equivalent) exercises
• Experience planning and executing penetration tests in one or more of the following domains:
  • Windows and Linux Operating Systems and IP-Based Networks
  • Web Applications
  • Avionics, Embedded Systems, Non-Standard Ethernet Protocols (ARINC, MIL-STD)
  • RF interfaces
  • Hardware
• Experience coordinating and presenting technical content to a diverse audience
• Knowledgeable in Cryptography and Reverse Engineering
• One or more of the following Certifications:
  • Offensive Security Certified Engineer (OSCE)
  • Offensive Security Certified Professional (OSCP)
  • GIAC Certified Exploit Researcher and Advanced Penetration Testers (GXPN)

Typical Education/Experience:

Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, computer science, mathematics, physics or chemistry (e.g. Bachelor) and typically 9 or more years' related work experience or an equivalent combination of technical education and experience (e.g. PhD+4 years' related work experience, Master+7 years' related work experience). In the USA, ABET accreditation is the preferred, although not required, accreditation standard.

Relocation:

This position offers relocation based on candidate eligibility.

Drug Free Workplace:

Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.

Shift:

This position is for 1st shift.

At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent.  Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.  

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.  

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

Pay is based upon candidate experience and qualifications, as well as market and business considerations.  

Summary pay range: $136,850 – $185,150

Applications for this position will be accepted through June 25, 2024.

Boeing is the world's largest aerospace company and leading manufacturer of commercial airplanes and defense, space and security systems. We are engineers and technicians. Skilled scientists and thinkers. Bold innovators and dreamers. Join us, and you can build something better for yourself, for our customers and for the world.

Relocation:

Relocation is available for eligible candidates, if authorized

Export Control Requirement:

U.S. Government Export Control Status: This position must meet export control compliance requirements. To meet export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.15 is required. “U.S. Person” includes U.S. Citizen, lawful permanent resident, refugee, or asylee.

Safety Sensitive:

This is not a safety sensitive position

Contingent Upon Award Program

This position is not contingent upon program award

Experience Level:

Individual Contributor - 4

Job Type:

Regular

Job Code:

6M04I4 (6MT)

Equal Employment Opportunity:

Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website.

Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning

Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.

Request an Accommodation - Requesting Interview Accommodations

Applicant Privacy - Applicant Privacy

EEO is the law Poster - EEO is the law

Boeing Policy on EEO - Boeing EEO Policy

Affirmative Action and Harassment - Boeing Affirmative Action and Harassment

Boeing Participates in E – Verify

• English -  E-Verify (English)
• Spanish - E-Verify (Spanish)

Right to Work Statement

• English - Right to Work (English)
• Spanish - Right to Work (Spanish)