Security Engineer

• Manage employees performing engineering and technical activities in the area of Product Security Test & Evaluation across the Enterprise including Defense Engineering Technology and Services.
• Manage, develop, and motivate a Product Security Test Team.
• Develop project and/or operational plans aligned to BT&E organizational objectives.
• Implement plans to ensure business, technical and customer requirements are achieved.
• Assign authority and responsibilities to employees to execute the plan.
• Reviewing execution plans, making appropriate adjustments, and resolving issues.
• Developing and monitoring appropriate metrics to ensure performance to plan.
• Support the execution and implementation of technical and functional excellence projects and processes applicable to the organization.
• Ensuring technical excellence by developing teammates, providing mentorship and instilling a culture of accountability and bias for action.
• Creating a positive cohesive team environment that embodies the Boeing Behaviors.
• Develop and execute plans to support and grow programs.
• Implementing policies and procedures and setting operational goals.
• Developing and maintaining relationships and partnerships with customers, stakeholders, peers, partners and direct reports.
• Effectively communicating to Senior Leaders and Executive Management.
• Develop a culture wherein Safety and Quality concerns are identified, assessed and actively managed as one element in the conduct of daily business.

Product Security Test & Evaluation Manager

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Define and execute on our GTM strategy for AI security solutions
• Collaborate with cross-functional teams to drive pipeline generation, customer engagements and market penetration
• Support the development and execution of strategies to identify, qualify and convert potential customers
• Conduct thorough market research and competitive analysis
• Lead customer-facing activities and technical conversations regarding AI security challenges
• Build strong relationships with key customer stakeholders
• Collaborate closely with sales, marketing, product management and engineering teams
• Act as an evangelist to educate customers of generative AI.

Solutions Specialist – AI Security

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• As a Cybersecurity Senior, you will play a role in helping clients improve their cybersecurity processes, systems, and strategies to enhance efficiency.
• Your responsibilities will involve assisting senior team members, conducting research, gathering data, performing testing, and contributing to the development of deliverables.
• In this role, you will also provide guidance and mentorship to other team members.
• Accountable for individual compliance with administrative responsibilities.
• Executes sales support tasks as assigned including proof of concepts, whitepapers, case studies, and demos.
• Gathers and documents business requirements, configuration designs, test plans/results, and any other deliverable required by the project as determined by management.
• Manages segments of projects independently while being involved in multiple projects.

Senior Cybersecurity

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience.
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade-offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

• Support Risk Management Framework (RMF) activities including security control implementation, assessment, and continuous monitoring.
• Conduct vulnerability scanning and analysis using tools such as ACAS/Nessus; track remediation through POA&Ms.
• Apply and validate DISA STIG hardening across applications, operating systems, and infrastructure components.
• Develop and maintain security documentation supporting Authorization to Operate (ATO) packages.
• Coordinate with development teams to integrate security requirements into design and delivery.
• Monitor security posture and report findings, risks, and metrics to program and Government stakeholders.
• Support incident response, audit, and inspection activities as required.

Mid Security Specialist

• Serve as a security engineer embedded with an Agile program delivering GEOINT capabilities to the National Geospatial-Intelligence Agency (NGA)
• Engineer security into modern, cloud-native systems rather than bolting it on after the fact
• Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards
• Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps)
• Perform system hardening, vulnerability assessment, and remediation across development and production environments
• Support security assessment and authorization activities in coordination with Government ISSMs and assessors
• Analyze findings, develop mitigation strategies, and maintain POA&Ms through closure
• Advise development teams on secure design, secure coding, and security architecture decisions
• Document security engineering artifacts supporting ATO and continuous monitoring

Mid Security Information Assurance Engineer

• Own and evolve GameChanger's multi-year security and technology strategy, including prioritization, resourcing decisions, alignment to business and parent company goals, and communication of security investments and tradeoffs to technical and executive leadership.
• Lead, mentor, and grow a team of security and technology operations professionals, including setting priorities, coaching teammates, managing performance, creating opportunities for growth and impact, and creating an environment to support autonomy and ownership.
• Own the direction and delivery for all key areas of information security, including product and application security, cloud security, AI security, security operations, vulnerability management, and governance, risk, and compliance functions.
• Evaluate and mitigate risks across infrastructure, product, and corporate environments.
• Set direction for AI security and governance as part of a secure SDLC and corporate environment, including the secure adoption of AI tooling, the security of AI-enabled product features, and AI usage governance, partnering with AI enablement and governance stakeholders across the company.
• Lead the governance, risk, and compliance program, including internal assessments (for example, NIST CSF 2.0), external assessments, and clear risk reporting to leadership.
• Own the security operations and incident response program for the GameChanger environment, including detection, on-call, escalation, and coordination with our parent-company security function.
• Own internal technology operations, including the technology support function for our remote-first workforce and the systems and endpoints employees rely on to do their work.
• Manage the BISO relationship with DSG, including decision rights, shared-services integration, and the partnership with the DSG CISO.
• Lead the cross-departmental security steering committee and represent security and technology in executive forums, building alignment and buy-in for key initiatives.
• Educate and influence the broader company on security principles, threats, and practices.

Director, Information Security – Technology

• Design and implement cybersecurity solutions, upgrades, enhancements
• Provide technical expertise and support for cybersecurity solutions
• Serve as subject matter expert in compliance of secure baseline configurations
• Initiate technical assessments of systems and applications
• Author new cybersecurity standards and procedures
• Serve as technical leader for cybersecurity projects
• Identify threats and develop suitable defense measures
• Lead root-cause analysis on Cyber systems

Cybersecurity Engineer III

• Lead development, monitoring, maintenance, and improvements of a foundational Security Governance pillar
• Plan and manage requirements and track completion of objectives for security risk, compliance and assessment
• Drive and execute initiatives involving cross-departmental dependencies
• Manage projects to improve and strengthen the enterprise security posture
• Maintain awareness of existing and proposed enterprise security policies and standards
• Provide support in security policy and standard development
• Identify regulatory changes that will affect information security policies, standards and procedures
• Lead the design, evaluation, and oversight of controls for key security and security IT projects, programs, applications, and systems

Senior Security Governance Program Manager – Secure Configuration, Asset Management

• Lead the development, implementation, and sustainment of product security for Boeing avionics systems
• Coordinate with platforms and system-of-systems product security counterparts for requirements and solutions
• Advise on results of security analysis to develop secure architectures and designs
• Establish and integrate standards and processes for product security engineering
• Perform criticality, adversity, threat analysis for avionics systems
• Document PSE activities and deliver PSE artifacts
• Identify and elevate product security risks to integrated product team(s) and management

Senior Product Security Engineer – Avionics Development

• Participate in CMMC Level 1 and CMMC Level 2 assessments.
• Understand the security practices of Level 1 and 2 assessments.
• Gather evidence for assessments and provide "met/not met" inputs to the lead assessor for consideration.
• Applied experience in assessing and analyzing cyber security documentation for client information systems.
• Operational knowledge in identifying and mitigating cyber security risks through formal assessment activities.
• Functional understanding of various standards to include NIST SP 800-171/171A Rev 2 and NIST SP 800-53/53A Rev 5 and how compliance with various standards and frameworks is achieved.
• Functional understanding of 32 CFR Part 170 requirements and associated CMMC guidance (e.g., CMMC Assessment Process v2.0).
• Familiarity with identifying and applying vulnerability remediations, fix procedures, and (when necessary) mitigation techniques.
• Ability to participate in compliance-related and technical discussions to include applicable compliance frameworks, architectures, and security control requirements (technical and non-technical).
• Basic knowledge of the following: External Service Providers, Cloud Computing/Cloud Service Providers, and FedRAMP.
• Self-motivated and able to work in an independent manner or as part of a client delivery team.
• Able to author original content/reports/attestations.
• Exceptional organizational, planning, and attention to detail skills.
• Assist with administrating the standalone CMMC 3PAO environment.
• Ability to perform other assessments such as NIST CSF, NIST 800-171, or other compliance based assessments.
• Able to work in a fast-paced, deadline-driven, remote environment.
• Able to travel at least 25% as required for various client engagements.

Cybersecurity CMMC Assessor

• Execute Internal Security Controls through compliance assessment reviews and self-inspections
• Identify deficiencies, develop and implement corrective actions
• Conduct Administrative Inquiries on personnel and processes
• Conduct Communication Security (COMSEC) duties
• Protect government, intellectual, third party, and company information
• Develop and administer an Operational Security program

Senior Industrial Security Specialist

• Lead, coach, and develop a team of LRAs who support EEOs in delivering consistent, high‑quality deliverables across assigned areas
• Allocate and prioritize work across the analyst team based on market complexity, volume, and key regulatory and business cycles
• Oversee onboarding, training, and ongoing skills development for the analyst team
• Establish and maintain standard operating procedures (SOPs), templates, and playbooks for analyst activities
• Provide ongoing coaching, feedback, and performance input
• Support EEOs in tracking obligations, risks, and decisions related to privacy, security, AI governance, and business continuity
• Coordinate preparation of “Executive‑ready” briefing materials, dashboards, and summaries for EEOs and EPSRM leadership
• Maintain centralized, analyst‑managed requirement and deliverable inventories
• Direct analyst activities to identify and document privacy, security, AI governance, and operational resilience requirements
• Oversee analyst support of key EPSRM engagement deliverables
• Drive continuous improvement in analyst methods, reporting, skills set and tooling to increase efficiency, quality, and consistency of EPSRM engagement activities

Senior Manager, Privacy & Security Regulatory Engagement

• Oversee program information security for compliance with requirements and guidelines
• Manage the execution of Risk Management Framework (RMF)
• Provide guidance and coaching to team in Information Security
• Communicate with security assessors and program office personnel
• Manage security compliance continuous monitoring
• Oversee security assessments and audits
• Prepare and present technical reports and briefings

Senior Information System Security Manager – Cybersecurity

• Lead the creation, implementation, and continuous improvement of ECS University training programs
• Develop and manage structured onboarding and refresher training for new and existing employees across all ECS disciplines
• Design specialized training tracks tailored to cyber, industrial/program, and management roles, incorporating regulatory compliance requirements
• Utilize Degreed and other existing tools to optimize training delivery and resource utilization
• Integrate training programs with the Technical Data Management System (TDMS) to track progress, completion, and effectiveness
• Update and maintain onboarding and training checklists and documentation
• Collaborate with leadership and subject matter experts to identify training needs and develop relevant content
• Build and lead a dedicated training team, including Industrial Individual Contributors (ICs)
• Organize and facilitate workshops, including Enterprise Classified Security University (ECSU) planning sessions, to establish project plan

Senior Industrial Security Training Manager

• Develop, deliver, and maintain classified industrial/program security training programs for employees working in secure environments
• Support onboarding, recurring, and role-based training requirements
• Create training content aligned to classified program needs, security policies, and applicable regulatory requirements
• Partner with leadership, security professionals, and subject matter experts to identify training gaps and build effective learning solutions
• Track training completion, effectiveness, and compliance using established systems and reporting tools
• Update training materials, checklists, and documentation to reflect current policies, processes, and requirements
• Facilitate workshops, training sessions, and refresher events to reinforce industrial/program security awareness and performance

Senior Industrial, Program Security Trainer

• Partners with either Health Plans or Shared Services to translate privacy, security, artificial intelligence (AI), business continuity, and related requirements
• Builds trusted relationships with Health Plan leadership and key stakeholders to ensure contract assurance
• Drives early engagement with Enterprise Privacy, Security and Risk Management visibility and influence across the organization
• Interpret and translate regulatory, contractual, and legal requirements into operational controls and guide stakeholders on compliance expectations.
• Validate and manage compliance evidence, deliverables, and audit readiness.
• Build and maintain strong relationships with leadership, operational teams, and regulators to remove obstacles, resolve issues, and support consistent compliance practices
• Support new market entries, RFP responses, contract renewals, and business expansion by providing specialized EPSRM subject‐matter expertise.
• Identify risks and control gaps, recommend mitigation strategies, and contribute to improved compliance maturity across the enterprise.

Privacy & Security Enterprise Engagement Officer

• Partners with either Health Plans or Shared Services to translate privacy, security, artificial intelligence (AI), business continuity, and related requirements from client contracts, laws, and regulations into actionable enterprise controls
• Builds trusted relationships with Health Plan leadership and key stakeholders to ensure contract assurance, readiness reviews, Request for proposal (RFP) support, timely deliverable fulfillment, compliance reporting, and continuous improvement
• Drives early engagement with Enterprise Privacy, Security and Risk Management (EPSRM) visibility and influence across the organization
• Lead EPSRM engagement with Health Plans or Shared Services to ensure privacy, security, AI, and business continuity requirements are clearly understood, implemented, and monitored
• Interpret and translate regulatory, contractual, and legal requirements into operational controls and guide stakeholders on compliance expectations
• Validate and manage compliance evidence, deliverables, and audit readiness, including responses to regulators, clients, and internal/external auditors
• Build and maintain strong relationships with leadership, operational teams, and regulators to remove obstacles, resolve issues, and support consistent compliance practices
• Track regulatory, legislative and contract changes, assess organizational impact, and communicate required actions while supporting scalable control updates
• Oversee the accuracy and completeness of privacy, security, AI, and business continuity documentation, including plans, attestations, questionnaires, and related submissions
• Enhance enterprise engagement processes by driving standardized procedures, governance practices, templates, and continuous improvement efforts
• Support new market entries, RFP responses, contract renewals, and business expansion by providing specialized EPSRM subject matter expertise
• Identify risks and control gaps, recommend mitigation strategies, and contribute to improved compliance maturity across the enterprise.
• Performs other duties as assigned. Complies with all policies and standards.

Security Engineer jobs in Montana

See all jobs on JobTailor