Cloud Security Control Assessor (Expert)

About the role

BAE Systems, a top‑ten prime contractor to the U.S. Department of Defense, provides engineering, integration and sustainment support for critical military platforms and systems. Within the Intelligence & Security division, the company delivers data‑to‑intelligence services and products to the Department of Defense, federal law‑enforcement agencies, and deployed troops. The role is for an experienced Cyber Security Engineer to support a key government customer, delivering engineering services for network infrastructure, enterprise computing, multi‑cloud services, virtualized applications, and storage systems. The position involves modern application technologies, containerized solutions, and both on‑premise and remote cloud deployments.

Responsibilities

• Participate in Joint Test Teams (JTT) to verify technical content submitted by cloud service providers against the customer’s defined security requirements.
• Produce risk data and artifacts for review by an Information Systems Security Manager to support risk analysis and decision‑making.
• Identify information security policy and process improvements and recommend best practices.
• Provide technical guidance to projects regarding the System Assessment and Authorization (A&A) process.

Requirements

• Minimum 11 years of experience in cyber security engineering or related fields.
• Preferred: Bachelor’s or Master’s degree in Systems Engineering, Computer Science, Information Systems Management, or a similar discipline.
• Security Controls Assessor (SCA) role experience.

Qualifications

• CISSP certification (preferred).
• AWS Certified Security – Specialty (preferred).
• Experience with Security Development and Operations (SecDevOps) practices.
• Familiarity with security tools such as Splunk, Nessus Security Center, WebInspect, Xacta, and PKI implementation.
• Knowledge of STIG compliance and vulnerability management.
• Proficiency with Microsoft Office 365.

Skills

• Systems engineering background with a strong security foundation.
• Thorough understanding of NIST SP 800‑53A.
• Knowledge of cloud security controls and implementations across AWS, Microsoft Azure, Google Cloud, and Oracle Cloud.
• Strong grasp of internet protocols (e.g., FTP, IP addressing).
• Ability to analyze technical content to determine compliance with defined security requirements.
• Outstanding written and oral communication skills.
• Highly motivated with a strong desire to learn new technologies.

Benefits

• Health, dental, and vision insurance.
• Health savings accounts.
• 401(k) savings plan.
• Disability and life/accident insurance.
• Employee assistance program and legal plan.
• Discounts on home, auto, and pet insurance.
• Paid time off, paid holidays, paid parental, military, bereavement, and applicable sick leave.
• Company recognition program with monetary and non‑monetary awards.
• Additional incentives based on position level or job specifics.

Pay

Full‑Time Salary Range: $149,603 – $254,317. This range reflects market pay structures; individual salaries are determined by business considerations, local market conditions, internal equity, and candidate qualifications such as skills, education, and experience.

Schedule

Full‑Time position.