Cybersecurity Engineer (ISSE)

Job Description
About BAE Systems
Recognized annually as a Top Workplace in Utah consecutively since 2018, employees at BAE Systems enjoy an exceptional work culture, employment stability, growth opportunities, and job satisfaction knowing they are helping to protect the country through the development of the most technological advancements in our nation's history. Our work culture thrives on hard work, innovation, diversity, equity, and inclusion.
About This Job
Air and Space Force Solutions, a business unit within BAE Systems, has an opening at our Hill Air Force Base, Utah location for a Principal Cybersecurity Engineer. The selected candidate will join our Information Services team and have an important role in supporting our mission of Strategic Deterrence through continual improvement and innovation. The position will have the following duties and responsibilities:

• Fulfill the ISSE responsibilities defined in DoD Instructions 8500.01 and 8510.01, AFI17-101 Risk Management Framework (RMF) for the Air Force Information Technology (IT), and the "DoD Program Manager's Guidebook for Integrating the Cybersecurity Risk Management Framework (RMF) into the System Acquisition Lifecycle"
• Coordinate closely with the ISSMs to ensure compliance with DoD Instructions 8500.01 and 8510.01, AFI17-101 Risk Management Framework (RMF) for the Air Force Information Technology (IT), and the "DoD Program Manager's Guidebook for Integrating the Cybersecurity Risk Management Framework (RMF) into the System Acquisition Lifecycle"
• Support efforts to integrate Cybersecurity throughout the lifecycle of IT systems. This includes the development and review of Cybersecurity-related artifacts, including System Security Plans, Cyber Security Strategies, Cybersecurity Impact Assessments, policies, plans, and procedures
• Continually assess activities and controls to secure information. Assess gaps in security and identify solutions to mitigate risk, including business processes, technical controls, and policy improvements
• Assist in the development of security policies, plans, and procedures to meet government regulations and industry best practices
• Develop security impact analyses
• Review technical assessments
• Use automated tools to analyze system security control compliance
• Collaborate with technical managers to ensure required controls are implemented and security processes are followed
• Build collaborative internal relationships with program and project teams, as well as external relationships with customers, regulatory bodies, other agencies and business partners
• Perform other duties as assigned

What's In It For You

• Competitive wages
• Medical
• Dental
• 401k
• Paid time off
• Work/life balance
• Career development
• Tuition reimbursement
• Mentorship opportunities
• Rewards & recognition

Work Location;
This position will primarily perform these activities in or around Hill AFB, UT.
Travel
<10%
Certification Requirement
The applicant must meet DoD 8570.01-M IAT Level II, IAM Level I or higher certification requirements on hire date.
Required Education, Experience, & Skills
Required Education and Experience

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related Engineering field and a minimum of 7 years experience, or
• Master's degree (MS or MBA) and 5 years of relevant experience
• Certification such as: CISSP; CISSP-ISSEP; CASP+ CE (CompTIA SecurityX); CSSLP
• Professional experience in information security, with a proven track record of leading large-scale projects
• Experience designing and implementing secure network architectures, Zero Trust environments, and cloud security frameworks (AWS, Azure, or GCP)
• Deep experience operating within regulatory frameworks such as NIST (800-53, 800-171), ISO 27001, CMMC, or SOC2
• Incident Response: Experience leading high-severity security incident responses and conducting post-mortem root cause analyses
• Threat Modeling: Proficiency in using frameworks like STRIDE or PASTA to identify vulnerabilities
• Security Tooling: Expert-level knowledge of SIEM (Splunk, Sentinel), EDR/XDR, Firewalls, and Vulnerability Scanners (Nessus, Qualys)
• Identity & Access Management (IAM): Expertise in OAuth, SAML, and multi-factor authentication (MFA) implementation
• Secure Coding/DevSecOps: Ability to integrate security into the CI/CD pipeline using SAST (Static Analysis) and DAST (Dynamic Analysis) tools
• Strategic Planning: Ability to translate business requirements into a technical security roadmap
• Stakeholder Management: Capable of communicating complex technical risks to non-technical executives to secure budget and buy-in

Certification Requirement
The applicant must meet DoD 8570.01-M IAT Level II, IAM Level I or higher certification requirements on hire date.
Preferred Education, Experience, & Skills
Preferred Experience

• Cross-Domain Expertise: Experience transitioning security postures across different environments, such as moving a legacy on-premises system to a hybrid-cloud or fully cloud-native environment
• Industry-Specific Tenure: In the context of defense and aerospace, a preference for candidates with experience in Cross-Domain Solutions (CDS), air-gapped networks, and highly classified environments
• Security Leadership: Proven experience as a "Lead" or "Architect" where the candidate was responsible for the security roadmap of an entire product line or business unit
• Public Speaking/Thought Leadership: A history of contributing to the security community through white papers, conference presentations (e.g., DEF CON, Black Hat), or open-source security projects
• Automation & Orchestration: Proficiency in Python, Go, or PowerShell to automate security responses (SOAR) and infrastructure as code (Terraform, Ansible)
• Advanced Cryptography: Deep understanding of PKI (Public Key Infrastructure), quantum-resistant encryption, and hardware security modules (HSMs)
• Red Teaming/Adversarial Simulation: The ability to not only defend but to simulate advanced persistent threats (APTs) to test the resilience of the organization
• Data Science for Security: Ability to apply machine learning (ML) and AI to anomaly detection and threat hunting

Pay Information
Full-Time Salary Range: $107359 - $182510
Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
About BAE Systems Intelligence & Security
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts - defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team-making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.
Intelligence & Security (I&S), based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do-from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels.
This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.