Role overview
About this role
<p>At Boeing, we are all innovators on a mission to connect, protect, explore and inspire. From the seabed to outer space, youll learn and grow, contributing to work that shapes the world. Find your future with us.</p><p><p>The Boeing Company is currently seeking a <b>Senior Cloud Security Specialist</b> to join the Information Security team. This individual will serve as a thought leader and cloud security expert for Boeing IT. In this role you will provide technical leadership direction to secure Enterprise Cloud solutions and help securely design cloud infrastructure and applications to keep Boeing data protected. This position can be based in <b>Bellevue, Washington; Kent Washington or St. Louis, Missouri.</b></p><p><p>A successful candidate will understand IT system thinking and solution architecture with a primary focus on security technologies across a number of domains. This individual will also have a deep understanding of cloud development, architecture, and technologies across all major public service providers.</p><p><br /><b>Position Responsibilities:</b></p><ul><li>Work cross functionally with enterprise IT and security teams to lead the identification and design of security solutions needed to protect cloud infrastructure and overall computing environment that involves various cloud-based applications and services</li><li>Lead Information Security in overall security solutions architecture and integration for cloud</li><li>Lead the identification of threats and appropriate remediation for cloud enterprise systems</li><li>Provide leadership oversight for technical security of enterprise cloud security programs, projects, and solutions</li><li>Work with enterprise IT and security program managers to communicate with leadership on status of all enterprise security programs, projects, and solutions</li><li>Define and drive overall cloud security strategy in alignment with both overall Information Security strategy and enterprise cloud strategy (including defining and maintaining integrated cloud security toolset roadmap to drive automation of security controls in an agile, CI/CD-focused environment)</li><li>Provide feedback on new and existing security policies as they apply to cloud</li><li>Review and approve cloud security architecture standards and change requests</li><li>Work closely with major cloud vendors (e.g. AWS, GCP, Microsoft Azure) to maintain a deep technical understanding of services offered</li><li>Mentor and drive skill development within cloud security SME community</li><li>Maintain awareness and knowledge of information security threats and vulnerabilities</li></ul><p><p><b>This position must meet Export Control compliance requirements, therefore a US Person as defined by 22 C.F.R. 120.15 is required. US Person includes US Citizen, lawful permanent resident, refugee, or asylee.</b></p><p><p><b>BasicQualifications (Required Skills/Experience):</b></p><ul><li>4+ years of work related experience in Cybersecurity</li><li>5+ years of experience leading teams in a formal and /or informal leadership role</li><li>Experience with AWS, C2S, or other cloud environments</li></ul><p><p><b>Preferred Qualifications (Desired Skills/Experience):</b></p><ul><li>Experience with threat based system modeling, design, & identification</li><li>Experience working with external suppliers in cross functional teams to identify security vulnerabilities and drive remediation</li><li>Knowledge of DFARS, FedRAMP, NIST 800-53/171, and CIS Benchmarks</li><li>Experience in hands on CI/CD based development and CI/CD Toolsets (Chef, Git, Jenkins) in a cloud environment</li><li>Experience in scripting skills (Python, Powershell, Ansible)</li><li>Experience in hands on development with native cloud services across all major public service providers (e.g. AWS EC2, RDS, Lambda, AWS CLI, S3, Azure Key Vault, Azure Security Center, Azure Active Directory, GCP Cloud Logging, GCP KMS)</li><li>Experience in working with containers and orchestration tools (Docker, Kubernetes, Rancher)</li><li>Experience in working with & implementing Cloud Access Security Brokers (CASBs) & Cloud Security Posture Management (CSPM) systems</li><li>Self-starter</li><li>Strong written and oral communication</li><li>High attention to detail</li></ul><p><p><b>Typical Education & Experience: </b><br />Education/experience typically acquired through advanced technical education (e.g. Bachelor) and typically 14 or more years' related work experience or an equivalent combination of technical education and experience (e.g. PhD+9 years' related work experience, Master+12 years' related work experience, 18 years' related work experience, etc.).</p><p><p><b>Relocation:</b></p><p>This position does not offer relocation. Candidates must live in the immediate area or relocate at their own expense.</p><p><p><b>Drug Free Workplace:</b></p><p>Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.</p><p><p><b>Shift Work:</b><br />This position is for first shift</p><p><p>At the highest level, diversity and inclusion are part of Boeing's values. Having diverse employees, business partners and community relationships is vital to creating advanced aerospace and defense products and services for our diverse customers around the world. The company's commitment to diversity means providing a work environment for all employees that is welcoming, respectful and engaging, with opportunities for personal and professional development. </p>