> Markdown version of [/jobs/ext/1750406-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/1750406-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Engineer - **Company:** BAE Systems - **Location:** Huntsville, AL, United States - **Salary:** $136,000.0 - $231,200.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Data Analysis, Microsoft Azure, Cloud Computing Security, Code Review, Cyber Security, Linux, Digital Forensics, Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, NIPRNet, Raw Data, Secure Coding, Web Application Security, Security Information and Event Management, Information Security Management System, Software Security, Malware, Firewalls (Computer Science), Data Management, National Industrial Security Program Operating Manual (NISPOM), Devsecops, Plan of Action and Milestones, Vulnerability Analysis, Microservices - **Published:** July 6, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9013232/cyber-security-engineer ## About the Role * Must be a US citizen and possess a Secret level clearance * IAM Level I certification commensurate with DoD 8570.1M requirements (or ability to obtain certification within 6 months) * Experience with the Risk Management Framework and achieving an ATO on NIPR and SIPR * Experience with vulnerability scanning solutions * High level of personal motivation and initiative to learn and acquire new skills, and adapt seamlessly to an ever-changing security environment * Customer focused excellent communicator and ability to work with limited supervision. * Strong organizational skills Preferred Education, Experience, & Skills * Security Incident Handling & Response * SIEM Management * Audit & Compliance * Analytics & Intelligence * Firewall/IDS/IPS Skills * Intrusion Detection * Application Security Development * Advanced Malware Prevention * Data Management Protection * Digital Forensics * Identity & Access Management * CISSP, CASP, or CISA Certification * Working knowledge of cloud security (i.e., AWS or Azure), DevSecOps, operating systems (Windows and Linux), web security, DoD HBSS security services, and micro services. ## Description BAE Systems is looking for a talented Cyber Security Engineer to support the development and delivery of modeling and simulations systems for government customers. Required Education, Experience, & Skills The Cyber Security Engineer will be responsible for: * Supporting adherence to all aspects of a rigorous Risk Management Framework (RMF) compliance program as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs and associated NIST publications * Work closely with the development and integration teams to ensure stability and hardening of the system throughout the development and production lifecycle * Achieve and maintain Authority to Operate approvals on NIPR and SIPR for various systems by adhering to the RMF * Enforcement of System Security Plans, Plans of Action and Milestones (POA&Ms), assessing and auditing systems security controls. * Developing and maintaining all security documentation to include the System Security Plan, Security Controls Tractability Matrix, POA&Ms, STIG Compliance Assessments, and any other security related documentation. Will be responsible for the following deliverables: * System Security Plan (SSP) * Security Controls Traceability Matrix (SCTM) * Security Assessment Plan * Accreditation Boundary * Ports, Protocols, and Services (PPS) * Security Technical Implementation Guide (STIG) Compliance Assessment * Secure Code Training Artifacts * Source Code Review Raw Data Files * Security Source Code * Vulnerability Scan Results * Cyber Plan of Actions and Milestones (POA&M) ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)