> Markdown version of [/jobs/ext/3692584-engineer-ii-information-system-security](https://www.wearedevelopers.com/jobs/ext/3692584-engineer-ii-information-system-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Engineer II - Information System Security

- **Company:** BAE Systems
- **Location:** Boulder, CO, United States
- **Salary:** $79,365.0 - $134,921.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Computing Platforms, Systems Engineering, Cloud Computing Security, Cyber Security, Information Security Management, Information Systems Security Engineering Professional, Trusted Systems, Computer Network Operations, Software Security, Mitre Att&ck, CIS Benchmarks, Splunk, Devsecops
- **Published:** October 11, 2026
- **Apply:** https://www.juju.com/job/1_ScrapingHub24830-BAE1US128460BREXTERNAL

## About the Role

Travel and local commute between company campuses and other possible non-company locations may be required. **Working Conditions:** + Work is performed in an office, laboratory, production floor, or cleanroom, outdoors or remote research environment. + May occasionally work in production work centers where use of protective equipment and gear is required. + May access other facilities in various weather conditions. **Required Education, Experience, & Skills** + BS degree or higher in Engineering or a related technical field is required plus 2 or more years related experience. + Each higher-level degree, i.e., Master s Degree or Ph.D., may substitute for two years of experience.
Related technical experience may be considered in lieu of education.
Degree must be from a university, college, or school which is accredited by an agency recognized by the US Secretary of Education, US Department of Education. + A current, active TS/SCI CI Polygraph security clearance is required. + DoW 8570 / DoW 8140 compliant security certification. + Knowledge of information security principles, practices, technologies, and standards, including NIST Standards (800-37, 800-53), DISA STIGs, and CIS benchmarks. + Hands-on knowledge of cyber-enabling tools like Splunk, Tenable SC/ACAS, HBSS. + Familiarity with DevSecOps concepts and software security engineering principles. \#LI-MT1 **Preferred Education, Experience, & Skills** + CISSP-ISSEP certification. + Experience with Cloud-based security solutions, AWS preferred. + Experience with the MITRE ATT&CK Framework. **Pay Information** Full-Time Salary Range: $79365 - $134921 Please note: This range is based on our market pay structures.
However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

## Description

The ISSE supports ongoing programs by managing cyber requirements, validating technical security implementations, and supporting Assessment & Authorization efforts pursuant to gaining and/or maintaining system Authorizations to Operate (ATO).
The Engineering, Science and Analysis (ESA) Strategic Capabilities Unit comprises the technical talent and organizational leadership that enables the successful delivery of high-impact discriminating technologies for our customers missions.
Our collaborative, cross-functional teams are committed to innovation, integrity, continual learning and strong execution. **What You ll Do:** + Supports the development, review, and advisement of programs on the engineering design, development, and deployment of secure systems, networks, and applications. + Assists in validating and verifying system security requirements definitions and analysis and establishes system security designs. + Supports maintaining and promoting a comprehensive and holistic cybersecurity engineering view while addressing stakeholder security risks and concerns through the application of systems engineering skills. + Support security incident response and investigation activities, including root cause analysis and remediation efforts, collaborating with cross-functional teams, including Engineering, IT, Operations, and Compliance. + Perform, or review, technical security assessments of computing environments to identify points of vulnerability,
non-compliance with established Information Assurance (IA) standards and regulations and recommend mitigation strategies. + Assist in the identification and implementation of appropriate information security functionality to ensure uniform application of customer security policy and enterprise security solutions. + Assess and mitigate system security threats/risks throughout the program life cycle. + Contribute to the security planning, assessment, risk analysis, risk management, certification and accreditation activities for system and network operations. + Develop Assessment and Authorization (A&A) documentation, providing feedback on completeness and compliance of its content. + Support security authorization activities in compliance with the NIST Risk Management Framework (RMF) and customer processes for security engineering. + Creatively identify ways to provide security compliance while minimally impacting day-to-day operations. + Identify, review, and define cybersecurity
requirements that enable technical Architects / Systems Engineers and SMEs to secure hardware and software products. + Develop, review, and recommend security policy, guidance, training, and best practices that align its implementation across the mission acquisition lifecycle. + May interface with Program Managers (PMs), IPT Leads and customer security stakeholders. + Maintain a regular and predictable work schedule. + Establish and maintain effective working relationships within the department, the Strategic Business Units, Strategic Capabilities Units and the Company.
Interact appropriately with others in order to maintain a positive and productive work environment. + Perform other duties as necessary. **On-Site Work Environment:** This position requires regular in-person engagement by working **on-site five days** each normally scheduled week in the primary work location.