Engineer II - Information System Security

BAE Systems is a defense, aerospace, and security company serving national security missions across space, cyber, and related domains. The junior information system security engineer will provide security engineering support by managing cyber requirements, validating technical security implementations, supporting incident response, and contributing to Assessment and Authorization activities for system Authorizations to Operate.

What you'll do:

• Supports the development, review, and advisement of programs on the engineering design, development, and deployment of secure systems, networks, and applications
• Assists in validating and verifying system security requirements definitions and analysis and establishes system security designs
• Supports maintaining and promoting a comprehensive and holistic cybersecurity engineering view while addressing stakeholder security risks and concerns through the application of systems engineering skills
• Support security incident response and investigation activities, including root cause analysis and remediation efforts, collaborating with cross-functional teams, including Engineering, IT, Operations, and Compliance
• Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations and recommend mitigation strategies
• Assist in the identification and implementation of appropriate information security functionality to ensure uniform application of customer security policy and enterprise security solutions
• Assess and mitigate system security threats/risks throughout the program life cycle
• Contribute to the security planning, assessment, risk analysis, risk management, certification and accreditation activities for system and network operations
• Develop Assessment and Authorization (A&A) documentation, providing feedback on completeness and compliance of its content
• Support security authorization activities in compliance with the NIST Risk Management Framework (RMF) and customer processes for security engineering
• Creatively identify ways to provide security compliance while minimally impacting day-to-day operations
• Identify, review, and define cybersecurity requirements that enable technical Architects / Systems Engineers and SMEs to secure hardware and software products

What they're looking for:

• BS degree or higher in Engineering or a related technical field is required plus 2 or more years related experience
• Each higher-level degree, i.e., Master's Degree or Ph.D., may substitute for two years of experience. Related technical experience may be considered in lieu of education. Degree must be from a university, college, or school which is accredited by an agency recognized by the US Secretary of Education, US Department of Education
• A current, active TS/SCI CI Polygraph security clearance is required
• DoW 8570 / DoW 8140 compliant security certification
• Knowledge of information security principles, practices, technologies, and standards, including NIST Standards (800-37, 800-53), DISA STIGs, and CIS benchmarks
• Hands-on knowledge of cyber-enabling tools like Splunk, Tenable SC/ACAS, HBSS
• Familiarity with DevSecOps concepts and software security engineering principles
• U.S. Citizenship Required: Yes
• U.S. Person Required: Yes
• This position requires regular in-person engagement by working on-site five days each normally scheduled week in the primary work location. Travel and local commute between company campuses and other possible non-company locations may be required
• Work is performed in an office, laboratory, production floor, or cleanroom, outdoors or remote research environment
• May occasionally work in production work centers where use of protective equipment and gear is required