> Markdown version of [/jobs/ext/3568845-cyber-analyst-senior-principal-isso](https://www.wearedevelopers.com/jobs/ext/3568845-cyber-analyst-senior-principal-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Analyst Senior Principal - ISSO

- **Company:** BAE Systems
- **Location:** Boulder, CO, United States
- **Experience:** Expert
- **Salary:** $132,962.0 - $226,035.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Software Applications, Configuration Management, Cyber Security, Information Systems, Linux, Information Security Management, Open Source Intelligence, Cybercrime, Tenable Nessus, Splunk, Vulnerability Analysis
- **Published:** October 3, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=29cd47bfbe017a58

## About the Role

* BS/BA in related field plus 8 or more years related experience.
 * Each higher-level degree, i.e., Master's Degree or Ph.D., may substitute for two years of experience. Related technical experience may be considered in lieu of education. Degree must be from a university, college, or school which is accredited by an agency recognized by the US Secretary of Education, US Department of Education.
 * A current, active TS/SCI security clearance is required with the ability to obtain and maintain a TS/SCI Polygraph.
 * Ability to identify and respond to potential cyber threats to company equities utilizing advanced software applications and information provided by government partners and open-source intelligence gathering.
 * 8140 compliant certification is required.

## Description

The Operations Strategic Capabilities Unit plays a fundamental role in enabling efficient business and program execution - from strategic capital investments, industrial operations and an efficient supply chain, to state-of-the-art manufacturing and test operations and top-notch facilities management.

What You'll Do:

 * Support the Information System Security Manager in obtaining and maintaining ATO approvals for various systems by ensuring all required authorization documentation and artifacts are accurate, complete, and compliant.
 * Execute RMF activities across assigned programs, including developing and maintaining system security documentation, managing POA&Ms, assessing and auditing security controls, and performing continuous monitoring.
 * Perform continuous monitoring activities (weekly, monthly, etc.) and ensure all actions and artifacts comply with cognizant security authority requirements.
 * Conduct risk and vulnerability assessments on classified systems to identify vulnerabilities, risks, and protection needs.
 * Maintain a configuration management system to track and control all components and software of an IS used in support of programs.
 * Utilize tools such as Splunk and Tenable Nessus to support monitoring, analysis, and vulnerability assessment activities, as applicable.
 * Leverage experience with Windows and Linux operating systems to support system security evaluations and RMF-related activities.
 * Serve as a technical expert and focal point for cybersecurity policy, planning, initiatives, certification, and accreditation.
 * Promote information security awareness across the program.
 * Maintain a regular and predictable work schedule.
 * Establish and maintain effective working relationships within the department, the Strategic Business Units, Strategic Capabilities Units and the Company. Interact appropriately with others in order to maintain a positive and productive work environment.
 * Perform other duties as necessary.