Job Description

Job Description

The Cyber Security Analyst serves as an Information System Security Officer (ISSO) for the Information Systems (IS) at BAE Systems. They understand and execute security requirements necessary for the protection of all sensitive information processed, stored, and/or transmitted. ISSOs interpret government requirements, prepare, validate, and maintain documentation in support of the Risk Management Framework (RMF) pursuant to the Joint SAP Implementation Guide (JSIG). This role also implements and oversees program security plans, policies, and procedures necessary to ensure compliance with all company and government requirements. 

This role directly supports the Tactical Solutions business unit which provides critical components to the warfighter in support of multiple platforms and missions.

ISSOs work collaboratively with program security, COMSEC, information technology, and program teams to build, accredit, and operate information systems that meet and evolve with the mission needs.

The Operations Strategic Capabilities Unit plays a fundamental role in enabling efficient business and program execution – from strategic capital investments, industrial operations and an efficient supply chain, to state-of-the-art manufacturing and test operations and top-notch facilities management. 

What You’ll Do:

 

• Author, update, and maintain System Security Plans (SSPs), Risk Assessment Reports (RARs), and Continuous Monitoring (CONMON) plans in support of information system accreditation.
• Evaluate and test Security Technical Implementation guides for both applicability and execution on systems.
• Conduct vulnerability scanning and flaw remediation in partnership with information technology to ensure systems remain secure through their lifecycle.
• Ensure that all the applicable JSIG controls are identified, implemented, assessed, and continuously maintained.
• Maintain a configuration management system to track and control all components of IS used in support of programs.
• Identify, evaluate, and document all IS and provide guidance on what controls and countermeasures may be appropriate to mitigate vulnerabilities and threats.
• Leverage Splunk to perform audits of all IS, investigation anomalies, and record and report findings, as required. Coordinate and/or conduct detailed inquiries; assess potential damage; and develop, document, implement, and monitor corrective action plans.  Perform data spill containment and clean up per customer direction.
• Coordinate the response and recovery activities from information security incidents.  This includes collaboration with appropriate response partners, assist with determining the root cause of cyber incidents and work with stakeholders and responsible parties to remediate any identified control gaps or failures.
• Identify and manage Plan of Action & Milestones (POA&Ms) through remediation as well as develop corrective action plans for each POA&M; monthly progress reporting to management.
• Maintain operation status of information systems by maintaining Authority to Operate (ATOs), Authority to Connect (ATCs), and Memorandum of Understanding (MOUs)
• Partner with system administrators, network engineers, and project leads to implement security configurations without breaking operational workflows.
• Maintain a regular and predictable work schedule.
• Establish and maintain effective working relationships within the department, the Strategic Business Units, Strategic Capabilities Units and the Company. Interact appropriately with others in order to maintain a positive and productive work environment.
• Perform other duties as necessary.

 

On-Site Work Environment: This position requires regular in-person engagement by working on-site five days each normally scheduled week in the primary work location. Travel and local commute between company campuses and other possible non-company locations may be required.

Working Conditions:

 

• Work is performed in an office environment, laboratory, cleanroom, or production floor. 

Typical Education and Experience

Typically a Bachelor's Degree and 2 years work experience or equivalent experience

Required Skills and Education

• BS/BA degree in related field plus 2 or more years related experience. 
• Each higher-level degree, i.e., Master’s Degree or Ph.D., may substitute for two years of experience. Related technical experience may be considered in lieu of education. Degree must be from a university, college, or school which is accredited by an agency recognized by the US Secretary of Education, US Department of Education. 
• A current, active Secret security clearance is required with the ability to obtain and maintain a Top Secret.
• 8140/8570 Compliant Cert/Security+ CE or the ability to obtain within 6 months.

#LI-JL2

Preferred Skills and Education

• Active Top Secret security clearance.

About BAE Systems, Inc.

BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it’s what we do at BAE Systems. Working here means using your passion and ingenuity where it counts – defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team—making a big impact on a global scale. At BAE Systems, you’ll find a rewarding career that truly makes a difference.

Headquartered in Boulder, Colorado, Space & Mission Systems is a leading provider of national defense and civil space applications, advanced remote sensing, scientific and tactical systems for government and commercial customers. We continually pioneer ways to innovate spacecraft, mission payloads, optical systems, and other defense and civil capabilities. Powered by endlessly curious people with an unwavering mission focus, we continually discover ways to enable our customers to perform beyond expectation and protect what matters most.

This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.

Multiple positions may be available on this opening.