Principal Cyber Architect

Job Description

See what you're missing. Our employees work on the world's most advanced electronics, from detecting threats for F-35 pilots to illuminating the night for soldiers. Spanning air, land, sea, and space, we develop the technology of tomorrow and deliver it today. Drawing strength from our differences, we're innovating for the future, and you can too. Our flexible work environment gives you the opportunity to make a meaningful impact without sacrificing your personal life. We put our customers first, exemplified by our mission: We Protect Those Who Protect Us.

In the Space & Intelligence Division of Aerospace and Mission Systems (AMS), you'll help develop systems that sense, control, exploit, and disseminate actionable information to warfighters supporting critical national security missions.

We are seeking an experienced Cybersecurity Architect to join the Cyber Resilience Capability Group (CRCG) and help ensure the security, resilience, and accreditation of mission-critical systems throughout their lifecycle. This role requires deep expertise in cybersecurity engineering, the Systems Development Lifecycle (SDLC), and the Department of Defense Risk Management Framework (RMF), including Assessment and Authorization (A&A) activities. The successful candidate will collaborate with program teams, engineering organizations, and government stakeholders to integrate security throughout system design, development, testing, and sustainment. As a key member of a team of cybersecurity professionals, you will partner with engineers, program leadership, and government stakeholders to guide RMF execution and deliver secure, resilient, high-technology solutions to the warfighter. If you're passionate about solving complex cybersecurity challenges and enabling critical mission success, we'd like to hear from you.

Responsibilities include:

• Supporting systems engineering teams

• Supporting Assessment and Authorization (A&A) activities for DoD Systems in accordance with Risk Management Framework

• Supporting traditional systems engineering tasks such as CONOPS, requirements development and allocation, cyber design engineering, cyber implementation engineering, verification and Validation, and continuous monitoring efforts during deployment, Operations and Sustainment

• Supporting offensive architecture analysis and design of defense-in-depth solutions

• Supporting Development Security Operations (DevSecOps) integration

• Supporting the development and assessment of system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestones

• Conducting and analyzing vulnerability assessments to validate system compliance with RMF controls and DISA Security Technical Information Guidelines (STIG)

• Analyzing static code scans and dynamic code scans to validate Application Security and Development STIG compliance

This position requires monthly local business travel to an offsite work location in El Segundo, CA in support of customer meetings, product demonstration, integration and/or systems testing.

Required Education, Experience, & Skills

• Six or more year experience in a Cyber, Systems, or Software engineering/technical discipline with relevant training and/or certifications.

• At least one DoDM 8140 (DCWF 652-series) compliant certification: CCSP, CISSP-ISSEP/ISSAP, CSSLP, Cloud or equivalent

• Understanding of MBSE and experience with Cameo

• Supporting Assessment and Authorization (A&A) activities for DoD Systems in accordance with Risk Management Framework and Zero Trust Architecture

• Supporting traditional systems engineering tasks such as CONOPS, requirements development and allocation, verification and Validation, and continuous monitoring efforts during deployment, Operations and Sustainment

• Supporting cyber design engineering and cyber implementation engineering

• Supporting Development Security Operations (DevSecOps) integration

• Supporting development and assessment of system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestones

• Conducting and analyzing vulnerability assessments to validate system compliance with RMF controls and DISA Security Technical Information Guidelines (STIG)

• Analyzing static code scans and dynamic code scans to validate Application Security and Development STIG compliance

• Good planning and organizational skills

• Strong oral and written communications skills

Preferred Education, Experience, & Skills

• Bachelor of Science degree in a Cyber, Systems, or Software engineering discipline, and 6 year(s) related experience or equivalent experience, training and/or certifications.

• Other cyber certifications desired (e.g., GISF, CASP , Cloud , GSEC, AWS CSA Professional, OSCP, etc.)

• Understanding of Zero Trust Architecture and ability to model Zero Trust into the overall system architecture.

• Understanding of offensive security tactics, techniques and procedures

• Experience with Cyber Failure Mode, Effects, and Criticality Analysis (FMECA)

• Experience writing proposals with innovative cost-effective solutions

• Experience with offensive architecting, threat modeling and attack vector analysis

• Experience with cloud and cross domain solution accreditations

• Ability to negotiate effectively with higher level managers, functional managers, customers, industry partners, and teammates

• Demonstrated leadership skills (supervisory experience, building teams, building customer relationships)

• Experience with leading and coordinating security test events to achieve accreditation milestones

• Experience with verifying and validating vulnerability resolutions and/or mitigations

• Experience with Attack and Threat modeling

• Strong mentoring skills

• Good planning and organizational skills

• Strong oral and written communications skills

Pay Information

Full-Time Salary Range: $118095 - $200762

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20 hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

Principal Cyber Architect

132235BR

EEO Career Site Equal Opportunity Employer. Minorities . females . veterans . individuals with disabilities . sexual orientation . gender identity . gender expression