BAE Systems is seeking a Senior Principal Systems Security Engineer to lead the integration of security engineering practices across the full systems development lifecycle (SDLC) for mission-critical DoW programs. The qualified candidate will drive the specification, design, implementation, and verification of security controls within complex system architectures, ensuring that cybersecurity and information assurance are embedded from concept through deployment and sustainment.

This role is grounded in the principles of NIST SP 800-160 (Systems Security Engineering) and emphasizes proactive security-by-design rather than reactive compliance. The Senior Principal Systems Security Engineer will serve as the technical authority for security engineering within multidisciplinary development teams, ensuring that protection strategies, threat-informed design decisions, and risk trades are woven into every phase of the engineering lifecycle.

Required Skills and Education

• Lead systems security engineering activities across all phases of the SDLC, including concept definition, requirements analysis, architecture and design, implementation, integration, verification and validation, deployment, and sustainment
• Define, decompose, and allocate security requirements to system elements (hardware, software, firmware, and interfaces) ensuring traceability from threat models through verification evidence
• Develop and maintain security architectures, including protection strategies, trust boundaries, security-relevant data flows, and attack surface analyses for complex DoD systems
• Conduct and lead threat modeling, Systems-Theoretic Process Analysis for Security and adversarial analysis to inform design trades and risk acceptance decisions
• Drive the integration of security into Development Security Operations (DevSecOps) pipelines, including automated security testing, static/dynamic analysis, container security, and secure CI/CD practices
• Lead Assessment and Authorization (A&A) activities for DoD systems in accordance with the Risk Management Framework (RMF), including security control selection, implementation, assessment, and continuous monitoring
• Author and maintain security engineering artifacts including System Security Plans (SSPs), Security Concepts of Operations (CONOPS), Security Control Traceability Matrices (SCTMs), and risk assessment reports
• Evaluate and apply applicable STIGs, SRGs, and security benchmarks to system components, and develop Plan of Action and Milestones (POA&Ms) for residual risks
• Provide technical leadership and mentorship to cybersecurity engineers, systems engineers, and software developers on secure design principles and security engineering best practices
• Engage with government customers, authorizing officials, and cross-functional program teams to communicate security posture, risk decisions, and compliance status
• Support proposal development, technical volume writing, and independent review of security architectures for new business pursuits

Preferred Skills and Education

• Master's degree in Systems Engineering, Cybersecurity, or related field
• Active TS/SCI security clearance
• CISSP-ISSEP (Information Systems Security Engineering Professional) or equivalent certification or ability to obtain within 6 months of start date.
• Experience with Model-Based Systems Engineering (MBSE) tools (e.g., Cameo, SysML) applied to security architecture
• Familiarity with System-Theoretic Process Analysis for Security (STPA-Sec) tooling and processes
• Experience with zero trust architecture design principles and implementation
• Knowledge of cross-domain solutions, multi-level security architectures, and secure system integration patterns
• Experience supporting security engineering for embedded systems, real-time systems, or weapon system platforms
• Background in formal verification or assurance methods for high-assurance systems

Benefits Information

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

Intern Benefits: Temporary employees generally are not eligible for BAE Systems benefits, but can elect to participate in the 401(k) savings plan. Temporary employees working 20+ hours per week are eligible for medical benefits, the employee assistance program, and business travel accident insurance.

Please note: Some benefits may be different for union employees that are governed by a collective bargaining agreement (CBA) or for positions covered by a wage law called the McNamara-O'Hara Service Contract Act (SCA).