Engineer Principal - Information System Security Engineer

Job Description
US CITIZENSHIP REQUIRED
#LI-JL2
This position is for an experienced information system security engineer (ISSE) to provide security engineering support within BAE Systems, Inc. Space & Mission Systems Sector. The ISSE supports ongoing programs by managing cyber requirements, validating technical security implementations, and supporting Assessment & Authorization efforts pursuant to gaining and/or maintaining system Authorizations to Operate (ATO).
The Enterprise Assurance Strategic Capabilities Unit delivers critical assurance disciplines that protect and enable people, data and missions. We provide a comprehensive approach to managing risk across the enterprise for current and future information environments where the business and missions execute. We apply the use of innovative tools and robust processes to ensure mission and business success.
What You'll Do:

• Develop, review, and advise programs on the engineering design, development, and deployment of secure systems, networks, and applications, aligning its implementation across the mission acquisition lifecycle.
• Validate and verify system security requirements definitions and analysis and establishes system security designs.
• Maintain and promote a comprehensive and holistic cybersecurity engineering view while addressing stakeholder security risks and concerns through the application of systems engineering skills.
• Support security incident response and investigation activities, including root cause analysis and remediation efforts, collaborating with cross-functional teams, including Engineering, IT, Operations, and Compliance.
• Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations and recommend mitigation strategies.
• Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of customer security policy and enterprise security solutions.
• Assess and mitigate system security threats/risks throughout the program life cycle.
• Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and network operations.
• Develop Assessment and Authorization (A&A) documentation, providing feedback on completeness and compliance of its content.
• Support security authorization activities in compliance with the NIST Risk Management Framework (RMF) and customer processes for security engineering.
• Creatively identify ways to provide security compliance while minimally impacting day-to-day operations.
• Identify, review, and define cyber security requirements that enable technical Architects / Systems Engineers and SMEs the ability to secure hardware and software products.
• Develop, review, and recommend security policy, guidance, training, and best practices that align its implementation across the mission acquisition lifecycle.
• Interface with Program Managers (PMs), Mission Assurance Managers (MAMs), and customers.
• Use excellent presentation skills to convey security mission risks at program milestone reviews (SRR, PDR, CDR, etc.).
• Maintain a regular and predictable work schedule.
• Establish and maintain effective working relationships within the department, the Strategic Business Units, Strategic Capabilities Units and the Company. Interact appropriately with others in order to maintain a positive and productive work environment.
• Perform other duties as necessary.

On-Site Work Environment: This position requires regular in-person engagement by working on-site five days each normally scheduled week in the primary work location. Travel and local commute between company campuses and other possible non-company locations may be required.
Working Conditions:

• Work is performed in an office, laboratory, production floor, or cleanroom, outdoors or remote research environment.
• May occasionally work in production work centers where use of protective equipment and gear is required.
• May access other facilities in various weather conditions.

#IJS
Required Education, Experience, & Skills

• BS degree or higher in Engineering or a related technical field is required plus 12 or more years related experience.
• Each higher-level degree, i.e., Master's Degree or Ph.D., may substitute for two years of experience. Related technical experience may be considered in lieu of education. Degree must be from a university, college, or school which is accredited by an agency recognized by the US Secretary of Education, US Department of Education.
• A current, active TS/SCI CI Polygraph security clearance is required.
• DoD 8570 / DoD 8140 compliant security certification.
• In-depth knowledge of information security principles, practices, technologies, and standards, including NIST Standards (800-37, 800-53), DISA STIGs, and CIS benchmarks.
• Hands-on knowledge of cyber-enabling tools like Splunk, Tenable, SC/ACAS, HBSS.
• Familiarity with DevSecOps concepts and software security engineering principles.
• Capable of planning and establishing technical baselines and derived requirements with or without customer specifications for proposals and on programs containing information systems.
• Experience in systems engineering and cybersecurity engineering disciplines in the Aerospace and Defense industry.
• Excellent leadership, communication, and interpersonal skills, with the ability to effectively collaborate with diverse stakeholders at all levels of the organization.
• Ability to effectively interact with customers and governmental figures at all levels.
• Willingness to be hands-on and work in a fast-paced environment.

Preferred Education, Experience, & Skills

• CISSP
• Experience with Cloud-based security solutions, AWS preferred.

Pay Information
Full-Time Salary Range: $126610.000 - $215270.000
Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
About BAE Systems Space & Mission Systems
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts - defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team-making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.
Headquartered in Boulder, Colorado, Space & Mission Systems is a leading provider of national defense and civil space applications, advanced remote sensing, scientific and tactical systems for the U.S. Intelligence, Department of Defense and scientific communities. We continually pioneer ways to innovate spacecraft, mission payloads, optical systems, and other defense and civil capabilities. Powered by endlessly curious people with an unwavering mission focus, we continually discover ways to enable our customers to perform beyond expectation and protect what matters most.