Join the Team Shaping the Future of Defense: Information Systems Security Engineer (ISSE)

Unlock Your Potential at BAE Systems

As a global leader in defense, security, and aerospace, BAE Systems is dedicated to innovation and impact. Our dynamic work environment offers opportunities for professional growth and a chance to make a meaningful difference in the world.

We are seeking an experienced Information Systems Security Engineer (ISSE) to join our team of experts in shaping the future of defense. As an ISSE, you will play a critical role in ensuring the security and integrity of our large-scale systems, networks, and infrastructure. You will work closely with cross-functional teams to design, implement, and maintain secure systems, identify and mitigate threats, and develop technical solutions to meet customer requirements.

Key Responsibilities:

• Security Architecture and Design: Validate and verify system security requirements, establish system security designs, and ensure uniform application of security policy and enterprise solutions.
• Threat Assessment and Mitigation: Assess and mitigate system security threats and risks throughout the program life cycle, and recommend technical solutions, products, and standards.
• Security Planning and Compliance: Lead and contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for various system and networking operations.
• Collaboration and Communication: Effectively collaborate with internal technical experts, Program Managers, and customer organizations to ensure security requirements are met.
• Agile Team Activities: Participate in Program Increment Planning and related agile team activities to ensure seamless integration with development teams.
• Security Testing and Verification: Plan and conduct security verification testing of relevant type 1 devices, and evaluate security solutions to ensure they meet customer-specified requirements.

What We Offer:

• A dynamic work environment with opportunities for professional growth
• A chance to make a meaningful difference in the world
• Collaborative and innovative team culture
• Competitive salary and benefits package

• Must currently hold a TS/SCI clearance with an appropriate polygraph.
• Must have at least 12 years of experience working as an ISSE on a large technical program.
• Must have a solid understanding of security practices and policies and hands-on vulnerability testing experience using Customer tools.
• Must have experience applying Risk Management Framework.
• Must have experience formulating and assessing IT security policy.
• Must have demonstrated knowledge of and experience with common security tools, such as Nessus, NMAP and Wireshark hardware/software security implementation, communication protocol, encryption techniques/tools, and web services.
• Must have experience with secure configurations of commonly used desktop and server operating systems.
• Must be comfortable working on multiple systems and components simultaneously in various configurations.
• Must have strong verbal and written communications skills.
• Must be committed to adopting and adhering to best practices.
• Must be able to effectively plan and prioritize tasking and communicate clearly regarding technical options and trade-offs.
• Must be capable of performing high quality work both independently and with a team in a fast-moving environment.

• Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.
• Five (5) years of experience with Defense in Depth Principals/technology (including access control, authorization, identification and authentication, public key infrastructure, network and enterprise security architecture) and applying risk assessment methodology to system development.
• DoD 8570 compliance with IASAE Level 2 or 3.
• Information Systems Security Engineering Professional (ISSEP) Certification.
• Computer Information Systems Security Professional (CISSP) Certification.
• Experience developing/implementing integrated security services management processes, such as assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response.
• Experience providing information assurance support for application development that includes system security certifications and project evaluations for firewalls that encompass the development, design, and implementation.
• Experience with penetration testing tools.
• Experience with scripting languages.