Associate Cybersecurity Software Assurance / Supply Chain Risk Management

Company: BOEING
Location: Decatur
Posted on: October 10, 2020

Job Description:

Boeing is looking for an Associate Cybersecurity Software Assurance (SwA)/Supply Chain Risk Management (SCRM) to support SwA/SCRM efforts on the GMD program. This person will assist in the SEI&T compliance and engineering oversight of the SwA/SCRM activities on the program as part of an RMF and SwA/SCRM focused Engineering Lifecycle. Position Responsibilities: A successful candidate shall oversee compliance of software assurance of the GMD program. The candidate shall identify and resolve Software Assurance (SWA) issues, such as Foreign Ownership, Control, or Influence The candidate shall review SWA Case, SWA Planning and SWA Verification Software Assurance Problems Reports The candidate shall identify and review the measures taken at each level of the GMD software process, by Boeing and suppliers, to develop, maintain, and securely manage software and firmware application development, patch management, and update processes and deliver analysis and results The candidate shall identify, review and provide to the customer the secure configuration guidelines that fully describe security relevant configuration options and their implications for the overall security of the software and firmware performed by Boeing and suppliers. The candidate will augment Cyber Supply Chain Risk Management and Supplier interfacing needs as the Cyber Engineering team requires The candidate shall utilize Agile methodologies for planning and execution of tasks. The candidate shall ensure compliance, by Boeing and its suppliers, of the following the SwA RMF control implementation of: Secure System/Software Development Lifecycle Software Development Process, Standards, and Tools Software Security Requirements Software Security Architecture and Design Software Configuration Management Developer Security Testing and Evaluation Static Code Analysis Dynamic Code Analysis Manual Code Reviews Attack Surface Reviews Software Threat Analysis Penetration Testing/Analysis Verifying Scope of Testing and Evaluation Independent Verification of Assessment Plans/Evidence Software Flaw Remediation Malicious Code Protection Software and Firmware Integrity Software Supply Chain Protection Government Code Assessment Rights This position requires the ability to obtain a US Security Clearance for which the US Government requires US Citizenship. Basic Qualifications (Required Skills and Experience): Minimum technical Bachelor's degree 1 years in cybersecurity engineering Cybersecurity certification (i.e. DoD 8570, Security, CISSP, etc.) Preferred Qualifications (Desired Skills and Experience): Cybersecurity, Software Engineering, Network or Computer Engineering degree Active Security Clearance Familiarity with US military, military customs, and/or defense systems Typical Education/Experience: Education/experience typically acquired through advanced technical education from an accredited course of study in engineering, computer science, mathematics, physics or chemistry (e.g. Bachelor) and typically 2 or more years' related work experience or an equivalent combination of technical education and experience (e.g. Master). In the USA, ABET accreditation is the preferred, although not required, accreditation standard. Relocation: This position offers relocation based on candidate eligibility. Basic relocation is available for internal candidates. Drug Free Workplace: Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.

Keywords: BOEING, Decatur , Associate Cybersecurity Software Assurance / Supply Chain Risk Management, Executive , Decatur, Alabama