> Markdown version of [/jobs/ext/1902306-information-assurance-engineer](https://www.wearedevelopers.com/jobs/ext/1902306-information-assurance-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Assurance Engineer - **Company:** BAE Systems - **Location:** Washington, DC, United States - **Experience:** Experienced - **Salary:** $118,095.0 - $200,762.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, Disaster Recovery, Identity and Access Management, Information Management, Networking Hardware, Network Routers, Enterprise Software Applications, Firewalls (Computer Science), Information Technology, Cyber Warfare, Network Server, Vulnerability Analysis - **Published:** August 1, 2026 - **Apply:** https://www.clearancejobs.com/jobs/8971559/information-assurance-engineer ## About the Role BAE Systems is seeking an Information Assurance / Cybersecurity Analyst to support our work as a prime contractor on a high-profile U.S. Navy weapon system . Accuracy, integrity, subject matter expertise, and the ability to work well independently and with others are important traits we expect the successful candidate to possess and demonstrate. This position is full-time on-site at Washington Navy Yard., * Full-time on-site at Washington Navy Yard * Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 10 years of professional work-related experience; or 12 years of related professional work experience in lieu of a degree * An IAT Level III and IAM Level II certification as specified in the DoD 8140. + Or, have a SECNAV 5239 qualifying degree and obtain an IAT Level III and/or IAM II certificate as specified in the DoD 8140. * Ability to obtain and maintain Common Access Card (CAC), badge access to the customer's * Hands on working knowledge of Risk Management Framework. * Experience preparing and reviewing RMF packages. * Experience with information security configuration guides or DISA STIGs. * At least three (3) years-experience supporting and/or maintaining information security technologies. * Experience developing policies, procedures, and technical training materials., * Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 6 years of professional work-related experience ## Description This position is responsible for providing Information Assurance, Cybersecurity, and Information Management to the Navy's Strategic Systems Program Command Information Officer (CIO). As an onsite Information Assurance / Cybersecurity Analyst, you will assist in conducting internal audits of enterprise IT networks, systems, applications, and security tools to ensure they adhere to Navy and DoD security policies and procedures (e.g., STIGs, CTOs, IAVMs, FRAGOs, NTDs, etc.) and applicable frameworks and regulations (e.g., NIST,FISMA, etc.). You will: * Review DoD, DON cyber security alerts, notices, IAVMs, etc. * Conduct risk assessments and discuss mitigation strategies when needed * Review security and data/logs to respond to security incidents on SSP Enterprise systems * Support the IAM/ISSM in developing Cybersecurity standards and policies * Maintain the SSP Enterprise systems Assessment and Authorization (A&A) packages; topologies; ports, protocol, and services lists; contingency plans, disaster recovery procedures, incident response plans, and POA&Ms * As a subject matter expert, you will provide technical guidance to the IAM/ISSM, CIO, Cybersecurity Workgroup (CSWG), Program Managers (PMs), Program Management Officers (PMOs), FBM Partners, etc. on cybersecurity matters and initiatives, including researching new technologies to counter evolving threats., + discerning the protection needs (i.e., security controls) of information systems and networks + evaluating test plans for applicability and completeness + assessing security controls based on cybersecurity principles and tenets. (e.g., CNSSI No. 1253, NISTSP 800-53) + performing impact/risk assessments + interpreting vulnerability scanner results to identify vulnerabilities. * Knowledge of + cyber defense and vulnerability assessment tools and their capabilities + vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins). + and understanding of security technologies including vulnerability scanning (ACAS), firewalls, HBSS and data protection/encryption systems. OS/CE certification + information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption). + capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware. + business continuity and disaster recovery continuity of operations plans + Ability managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [tRPC: API schemas are pure overhead](https://www.wearedevelopers.com/videos/796-trpc-api-schemas-are-pure-overhead) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)