Lead site engagements and conduct security assessments of OT systems and work centers at various sites within the Enterprise.
Evaluate risk and recommend mitigation strategies.
Evaluate and enhance the enterprise OT Monitoring Program to deliver safe, non-disruptive, and reliable cybersecurity visibility across networks and systems.
Evaluate, pilot, validate, and deploy cybersecurity monitoring and logging toolchains, assess proposed analytics and detection rules for OT protocols, perform proactive threat hunting across OT telemetry.
Review and assess OT monitoring and log‑collection policies covering collection scope, retention, access controls, privacy, rules of engagement, and compliance requirements.
Create and maintain playbooks, training materials, and handover packages for SOC analysts, site focals, IR responders, and operations teams.
Lead training sessions and tabletop exercises.
Coordinate with cross functional stakeholders (manufacturing, IT, safety, vendors) to minimize operational impact, track program metrics and continuously improve.
Support incident response (IR) and root‑cause analysis for OT security events, including coordination with the IR team, safety, and operations teams.
Contribute to roadmaps, budget justification, and vendor evaluations to evolve the OT monitoring and centralized logging capability.
Evaluate and pilot emerging product security engineering methods, tools, and scalable practices, using insights from lab activities to inform enterprise strategy and continuously raise Boeing’s security posture.
Requirements
Level 3: 6+ years of related work experience or an equivalent combination of education and experience
Level 4: 10+ years of related work experience or an equivalent combination of education and experience
Experience in performing or applying product security engineering to a program or product
Excellent verbal and written skills with ability to communicate task progress and challenges within team and with technical leadership, both internal and external
Experience in strategic thinking and leadership skills
CISSP Certification
Experience with industry standard cybersecurity frameworks (NIST, OWASP, DFARS)
Experience with managing vendors, contracts, and/or working with Cybersecurity controls or Applications systems
Experience in broad-based computing system architecture