Cloud Security Control Assessor (Expert)

Location: Herndon, Virginia

Job Description

BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world.

At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom.

We are looking for experienced Cyber Security Engineers to join our technology-based program supporting a key government customer. This program will deliver engineering services for network infrastructure as well as sophisticated enterprise computing infrastructure including end-point devices, data center hosted servers, multi-Cloud services as well as virtualized applications, and storage systems. Enterprise Computing Engineering services include modern application technology including containerized solutions with orchestrated workflow that function both on customer premise, and via remote Cloud services. Network infrastructure engineering services are comprised of core infrastructure, voice and video engineering, field engineering, application management and development for networks, network analytics, firewalls, network access controls and bandwidth service delivery. This is a fast paced, challenging, and career rewarding experience to recruit and develop provide top talent and solutions on one of the most complex and high profile programs within the government.

ABC
#LI-EE1

Cyber Security Systems Engineer plans, coordinates, and implements security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information. We are actively seeking Security Controls Assessor (SCA) with a minimum of 11 years' experience. Bachelor's or Master’s Degree are preferred in Systems Engineering, Computer Science, Information Systems Management or similar discipline.

Daily Duties:

• Participate in Joint Test Teams (JTT) to verify technical content submitted by cloud service providers to determine if it meets the customer’s defined security requirements.
• Produce risk data/artifacts that are submitted to an Information Systems Security Manager for risk analysis and decision making.
• Use experience and knowledge to identify information security policy/process improvements and best practices.
• Provide technical guidance to projects regarding the system Assessment and Authorization (A&A) process.

• Systems engineering background with security foundation
• Thorough understanding of NIST SP 800-53A
• Understanding of Cloud security controls and implementation (i.e., AWS, MS Azure, Google Cloud, Oracle Cloud)
• Thorough understanding of internet protocols (FTP, IP addresses, etc.).
• Ability to analyze technical content to determine if it meets the customer’s defined security requirements.
• Outstanding written and oral communications skills
• Highly motivated; strong desire to learn new technologies

• Security Development and Operations (SecDevOps)
• Various security tools and processes such as Splunk, Nessus Security Center, WebInspect, Xacta
• PKI implementation
• STIG compliance and vulnerability management
• CISSP
• AWS Certified Security Specialty
• Microsoft Office365