Cyber Security Intrusion Prevention Subject Matter Expert

Job Description

BAE Systems has an opening for a Tipping Point Intrusion Prevention System (IPS) Engineer (Subject Matter Expert) for JRSS NOC at Scott AFB, IL. Defense Information Systems Agency (DISA) located at Scott AFB, IL is partnering with the U.S. Army and Air Force to fundamentally change the way the Department of Defense (DoD) secures and protects its information networks by deploying Joint Regional Security Stacks (JRSS). Joint Regional Security Stacks (JRSS) are designed for security of the network to be centralized into regional architectures instead of locally distributed architectures at each military base, post, camp or station. This position directly supports the DISA-provided JRSS capabilities and services in our 24-7 Global Network Support Center working in our JRSS NOC. We work in a performance-based environment where our performance is based on pre-determined Service Level Agreements (SLA) or Acceptable Levels of Performance (ALP).

. Responsible for advanced firewall management to include Cisco, Juniper, PAN, and Tipping Point.
. Installing, configuring, and tuning the following Tipping Point Intrusion Prevention System (IPS) and SourceFire.
. Tipping Point SMS configuration as well as IPS configuration and management.
. Extensive familiarity with intrusion detection methodology, basic operation and management of Tipping Point Intrusion Prevention System (IPS) like network appliances.
. Responsible for the configuration, performance, availability, and security of the JRSS network architecture.
. Identify and document network errors and solutions.
. Analyze network and telecommunications alarms and identify potential issues.
. Configure, test, install, troubleshoot, and maintain network devices such as firewalls, cryptographic devices, and routers to optimize performance and ensure the desired security posture is attained and maintained.

Typical Education & Experience

Bachelor's Degree and 12 years work experience or equivalent experience

Required Skills and Education

•Bachelor's degree in a relevant technical discipline with 8 years of overall related experience. 4+ years of additional related years of experience is accepted in lieu of a degree.
•Hold DoD-8570 IAT Level 2 baseline certification (Security+ CE, CISSP or equivalent) prior to start date.
•Currently possess an active security clearance.
•Able to work in a shift work environment as we are a 24/7 operation.
•Experience with the following: alarm surveillance, fault management, LAN maintenance, performance management
• Expertise with the following technologies: WAN IP routing protocols (e.g. BGP, ISIS), IPsec, traffic shaping, firewalls (e.g. ASA, Palo Alto, Juniper), IPS/IDS systems, Crypto network appliances, and/or WAN traffic acceleration
• Expertise with of the following devices/vendors: CISCO, Juniper, Firewalls, Tipping Point, F5 LTM
• Experience with Cisco Sourcefire, Tipping Point Intrusion Prevention System (IPS), and Bivio

About BAE Systems Intelligence & Security

BAE Systems Intelligence & Security, based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do-from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels. That's BAE Systems. That's Inspired Work.

Equal Opportunity Employer/Females/Minorities/Veterans/Disabled/Sexual Orientation/Gender Identity/Gender Expression. To see Inspired Work in action, visit and follow us on Facebook:

Back to top