Cyber Anst Prin

BAE Systems • Broomfield, CO

19h • Onsite

About The Position

Technical advisor for the Information Systems (IS) security requirements necessary for the protection of all sensitive information processed, stored, and/or transmitted through the use of the IS. Interprets government requirements, prepare, validate, and maintain documentation in support of the Risk Management Framework (RMF). Also implements and oversees the program security plans, policies, and procedures necessary to ensure compliance with all company and government requirements. The Operations Strategic Capabilities Unit plays a fundamental role in enabling efficient business and program execution – from strategic capital investments, industrial operations and an efficient supply chain, to state-of-the-art manufacturing and test operations and top-notch facilities management.

Requirements

• Related Bachelor’s and 6 or more years of related experience; or HS Diploma and 10 or more years of related experience.
• Each higher-level degree, i.e., Associate’s, Bachelor’s Degree, Master’s Degree or Ph.D., may substitute for additional years of related experience.
• Related certifications may count towards years of related experience.
• Related technical experience may be considered in lieu of education.
• Degree must be from a university, college, or school which is accredited by an agency recognized by the US Secretary of Education, US Department of Education.
• A current, active Top Secret security clearance is required with the ability to obtain and maintain a TS/SCI.
• Ability to identify and respond to potential cyber threats to BAE Systems Space and Mission Systems (SMS) equities utilizing advanced software applications and information provided by government partners and open-source intelligence gathering.
• 8140 compliant certification.
• Bachelor's degree in a technical field.
• Four years prior Information System Security Officer experience.
• A current, active TS/SCI.
• CISSP, CASP or CISM.
• Intermediate to advance experience with NIST 800-37 (rev 2) and NIST 800-53.

Responsibilities

• Perform audits of all IS, investigation anomalies, and record and report findings, as required.
• Coordinate and/or conduct detailed inquiries; assess potential damage; and develop, document, implement, and monitor corrective action plans.
• Maintain a configuration management system to track and control all components and software of an IS used in support of programs.
• Identify and manage the Plan of Action & Milestones (POA&Ms) through remediation as well as develop corrective action plans for each POA&M; quarterly progress reporting to management or customer(s).
• Identify, evaluate, and document all IS and provide guidance on what controls and countermeasures may be appropriate to mitigate vulnerabilities and threats.
• Schedule, conduct, and administer security tests and evaluations to ensure that all the applicable IS are operating in accordance with security requirements.
• Perform data spill containment and clean up per customer direction.
• May coordinate the response and recovery activities from information security incidents. This includes collaboration with appropriate response partners, assist with determining the root cause of cyber incidents and work with stakeholders and responsible parties to remediate any identified control gaps or failures.
• Promote information security awareness.
• Maintain a regular and predictable work schedule.
• Establish and maintain effective working relationships within the department, the Strategic Business Units, Strategic Capabilities Units and the Company.
• Interact appropriately with others in order to maintain a positive and productive work environment.
• Perform other duties as necessary.

Benefits

• health, dental, and vision insurance
• health savings accounts
• a 401(k) savings plan
• disability coverage
• life and accident insurance
• employee assistance program
• legal plan
• discounts on things like home, auto, and pet insurance
• paid time off
• paid holidays
• paid parental leave
• military leave
• bereavement leave
• any applicable federal and state sick leave
• company recognition program to receive monetary or non-monetary recognition awards

What This Job Offers

• Job Type: Full-time
• Career Level: Principal