Job Description

Job Description

What’s it like to work on a team where your engineering decisions directly strengthen the security of critical enterprise systems? At BAE Systems, you’ll join a mission‑driven Cybersecurity Engineering organization where your work protects our people, data, and national security every single day.

As an IT Senior System Security Engineer, you will build a career solving complex security challenges across large‑scale enterprise environments. In this job, you will design, prototype, and support security tools and infrastructure that safeguard our network. You’ll work with experienced engineers who value innovation, technical excellence, and continuous learning.

In this role, you will architect and engineer enterprise security capabilities, analyze network and system risks, and develop automated solutions that keep pace with today’s threat landscape. You will support critical security platforms across a large enterprise, collaborate with our 24/7 GSOC, and help lead the technical direction of our cybersecurity tools and workflows.

Responsibilities
• Architect, design, and implement enterprise security tools; upgrade and enhance existing security infrastructure.
• Engineer and support production‑level security applications running on Linux‑based environments.
• Develop automation, scripts, and tool integrations using Python, Bash, Perl, Ansible, YAML, or similar technologies.
• Analyze network architectures, packet flows, and system telemetry to improve security visibility and effectiveness.
• Research, prototype, and evaluate new security technologies relevant to large enterprise operations.
• Produce clear technical documentation (installation guides, diagrams, configuration guides, compliance documentation, etc.).
• Collaborate directly with the 24/7 GSOC to ensure security tool performance, reliability, and operational readiness.
• Mentor junior engineers and contribute to team‑level planning, direction, and best practices.

Keywords:
Security Engineering, IT System Security Engineer, Enterprise Security Tools, Linux, Network Architecture, Packet Analysis, Scripting, Python, Bash, Automation, SIEM, IDS, IPS, WAF, Packet Brokers, Security Infrastructure, Cybersecurity Career

a {
text-decoration: none;
color: #464feb;
}
tr th, tr td {
border: 1px solid #e6e6e6;
}
tr th {
background-color: #f5f5f5;
}

Typical Education and Experience

Typically a Bachelor's Degree and 8 years work experience or equivalent experience

Required Skills and Education

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or related technical field; or the equivalent experince
• 8-10 years of relevant security systems experince 
• Experience supporting and engineering enterprise‑scale security tools in large network environments.
• Strong working knowledge of Linux systems, shell environments, and automation/scripting languages (Python, Bash, Perl, etc.).
• Demonstrated understanding of network architecture, routing, packet flows, and security telemetry.
• Hands‑on experience with security technologies such as IDS/IPS, SIEM, WAF, packet brokers, or endpoint/network monitoring systems (vendor‑agnostic).
• Ability to develop technical documentation and communicate complex issues clearly both verbally and in writing.
• Ability to work collaboratively across engineering, operations, and security teams; strong problem‑solving and analytical skills.
• Ability to participate in on-call rotation and for 24/7 support

• Behaviors/competencies:

• Technical leadership and mentoring capability
• Ability to prioritize and manage multiple engineering tasks
• Strong analytical thinking and attention to detail
• Self‑driven learner who adapts to new technologies and evolving threats

Preferred Skills and Education

• Master’s degree in Cybersecurity, Computer Science, Systems Engineering, or a related technical discipline.
• Experience with enterprise‑class tools such as Gigamon, Corelight, Imperva WAF, Cisco Firepower, NetWitness, Zeek, Snort, Syslog‑NG, or similar technologies.
• Experience with automation and configuration tooling (Ansible, Docker, YAML‑based pipelines).
• Prior experience supporting or integrating security tools with a 24/7 SOC/GSOC environment.
• Knowledge of secure system design principles, threat detection engineering, and packet analysis methodologies.
• Preferred clearance level: Ability to obtain a SECRET or higher‑level clearance if required by future program needs.

#LI-DM2
#LI-Remote

About BAE Systems, Inc.

BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support.

Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters.

This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.