onsite
Senior Product Security Engineer - Boeing
Security Engineer
Senior engineer leading product cyber‑security for embedded systems, driving secure design, threat modeling, vulnerability analysis, and remediation across the development lifecycle using C/C++ and security best practices.
About the role
Key Responsibilities
- Define and implement security requirements for embedded hardware and firmware throughout the product lifecycle.
- Conduct threat modeling, risk assessments, and vulnerability analyses on system architectures and code bases.
- Develop and review secure coding guidelines, perform code reviews, and provide remediation guidance for C/C++ implementations.
- Collaborate with cross‑functional hardware, software, and test teams to integrate security controls and validate resilience through penetration testing and fault injection.
- Lead incident response for security findings, produce detailed reports, and track remediation progress.
Requirements
- Bachelor’s or higher in Computer Engineering, Electrical Engineering, Computer Science, or related field with 7+ years of product security experience.
- Deep expertise in embedded systems security, including secure boot, cryptographic modules, and hardware‑rooted trust.
- Proficiency in C/C++ development and secure coding practices; scripting experience (e.g., Python) for automation and analysis.
- Hands‑on experience with threat modeling frameworks (e.g., STRIDE, MITRE ATT&CK) and vulnerability assessment tools.
- Strong communication skills to convey security concepts to multidisciplinary teams and influence design decisions.