CSEA Contractor

BAE Systems Strategic Aerospace Services WLL | Full time

The CSEA Contractor is expected to provide hands-on support to the Cyber Security Engineering and Architecture section by contributing to security architectureactivities, technical security reviews, control implementation, risk assessments and advisory services across enterprise systems, infrastructure,cloud environments and applications.

Thecontractor is expected to have:

• Hands-on experience with Enterprise Security Architecture methodologies and modern security technologies, including IAM, SIEM, EDR/XDR, WAF, SASE, Zero Trust, cloud security, and security automation tools.
• Strong knowledge of IT infrastructure security, including network security, cloud security,endpoint security, identity security, and secure architecture design principles.
• Strong knowledge of application security, including secure SDLC, Dev Sec Ops , API security, secure codingpractices, and application threat modeling.
• Experience implementing,validating, and reviewing security controls across IT infrastructure,cloud platforms such as AWS, Azure, and GCP, and enterprise applications.
• Experience developing,maintaining, and enhancing security control libraries, security patterns,baselines, and architecture standards, while ensuring their integrationinto security architecture and engineering activities.
• Strong understanding ofcybersecurity standards, laws, and frameworks, including NIST, ISO/IEC
  27001, CIS Controls, GDPR, PCI-DSS, and other relevant regulatory or compliance requirements.
• Strong understanding ofcybersecurity best practices, including secure network architecture,endpoint protection, identity and access management, cloud security,Dev Sec Ops , and defense-in-depth design.
• Experience conducting securitydesign reviews, architecture assessments, threat modeling, technical risk assessments, and security gap assessments.
• Ability to support business units, project teams, IT teams, and security stakeholders in selecting,designing, and implementing secure information systems and technology solutions.
• Experience with securityautomation and scripting using tools and languages such as Python,Power Shell, Bash, Terraform, Ansible, or similar technologies.
• Ability to support securityinvestigations, incident response activities, forensic analysis, rootcause analysis, and post-incident improvement recommendations when required.
• Experience providing technical consultation and advisory support on CSEA-related projects, initiatives,and engagements as requested by the CSEA Section Head.
• Excellent ability to translatetechnical cybersecurity concepts, risks, and recommendations into clear business language for both technical and non-technical stakeholders.
• Experience participating incybersecurity committees, technical working groups, architecture reviewboards, project meetings, and cross-functional security discussions.
• Strong problem-solving,analytical, and decision-support skills, with the ability to assess complex technical environments and recommend practical security solutions.
• Ability to work independently while also collaborating effectively with security architects, SOCanalysts, IT teams, application teams, project managers, and business stakeholders.
• Excellent verbal and written communication skills, with the ability to document security findings,architecture recommendations, risks, and remediation actions clearly and professionally.
• Ability to mentor and supportCSEA team members as needed by transferring knowledge, sharing technical expertise, and contributing to the development of internal cybersecurityengineering and architecture capabilities.

Thecontractor may be expected to support or deliver:

• Security architecture reviews
• Security design review reports
• Threat models and risk assessments
• Security control mapping and recommendations
• Architecture patterns,baselines, and standards
• Technical security advisoryreports
• Secure design recommendations for infrastructure, cloud, and applications
• Security improvement roadmaps
• Support for incident response,investigations, and technical analysis
• Knowledge transfer sessions forCSEA members

Education:

• Bachelor’sdegree in a technology-related field, such as…