Information Assurance Security Engineer

General Dynamics Information Technology; Springfield (MO); On-site; USD 120,000 - 190,000; Full time

Job summary

General Dynamics Information Technology seeks an Information Assurance Security Engineer to support a sensitive intelligence program. The role involves developing and enforcing information security policies, conducting RMF activities, and coordinating multi-agency security efforts.

Candidates should possess IAM II and familiarity with ICD 503 and cloud infrastructure. The position requires collaboration with multiple IT groups and vendors to design secure architectures, manage incidents, and

Qualifications

• 10-15 years of related experience in data security administration.
• Bachelor's Degree in Computer Science or a related technical discipline, or equivalent experience.
• CISSP certification or equivalent (CAP, GSLC, CISM) preferred.
• Knowledge of ICD 503 and familiarity with Cloud Infrastructure/AWS-based solutions.

Responsibilities

• Provide expert technical services on Information Security and RMF processes.
• Draft information security policies and MOAs; coordinate Certification and Accreditation.
• Advise on system design/architecture for security and manage multi-agency information sharing.
• Respond to security incidents; perform audit log reviews and ensure security training.
• Work with developers and IT staff to build secure systems from the start.
• Configure and enforce IA security controls across network infrastructure.

Skills

Scripting (Unix/RHEL)

PowerShell

Network routing/VLAN

System administration experience

Network engineering experience

Cloud Infrastructure/AWS

Education

CISSP certification or equivalent (CAP, GSLC, CISM)

Bachelor's degree in Computer Science or related field

Tools

ACAS

HBSS

Carbon Black

Tanium

RedSeal

EMET

Job description

Transform technology into opportunity as an Information Assurance Security Engineer with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you'll be at the forefront of innovation and play a meaningful part in improving how agencies operate.

At GDIT, people are our differentiator. As an Information Assurance Security Engineer, you will help ensure today is safe and tomorrow is smarter. Our work depends on a TS/SCI cleared Information Security Engineer joining our team to support our intelligence customer in Springfield, VA or Arnold, MO.

HOW AN INFORMATION ASSURANCE SECURITY ENGINEER WILL MAKE AN IMPACT

Position Summary:

General Dynamics Information Systems (GDIT) is seeking a Security Engineer to provide expert technical services on all aspects of Information Security. Responsible for writing information security policy drafts, writing and reviewing Memorandum of Agreements and coordinating and managing all aspects of the Certification and Accreditation. Advise and assess system design/architecture as well as defining, designing and evaluating information security systems. Manage multi-agency information sharing and integration security. Maintain affiliations with high-level personnel at multiple agencies and organizations involved in Information Security. Tasking includes incident response, system access approval, audit log review, Configuration Control Board and daily consultations/consulting on a wide variety of security issues. Report, document and investigate all security related incidents; assist with development and implementation of corrective measures.

Unique/Additional Requirements:

Candidate must have knowledge of and experience with ICD 503 and be familiar with Cloud Infrastructure/AWS-based solutions.

Candidate must possess IAM II certification to start in accordance with DOD 8570.1M. This position is defined as in 8570.1M chapter 4, pg 35. Candidate is required to understand how our customer's RMF process work and how systems security requirements will be met.

Candidate will work with all IT groups to build IT systems with security planned from the start. Work with developers, system engineers, project managers, and users to identify the level of protection systems will need. Understand and be able to identify what group or process will satisfy security requirement.

• Act as the representative of the Information System Security Manager ensuring compliance with IS security procedures.
• Support efforts to operate, maintain, and dispose of information system materials in accordance with security directives, policies and practices and as annotated in Systems Security Plans.
• Generate and implementation of requisite security training ensuring user security awareness of responsibilities prior to system access.
• Initiate protective and corrective measures when incident or vulnerabilities are discovered.
• Ensure IA hardware and software complies with security configuration guides.
• Implement and enforce IA policies and procedures as defined by A&A documentation.
• Ensure users are aware of their IA responsibilities.
• The ability to work on multiple projects/tasks at once and operate in a dynamic, fast-paced, team-oriented environment.
• Perform Operations & Sustainment (O&S) functions for the NCE network security infrastructure (firewalls, web gateways, mail gateways, ids, load balancers, performance monitoring tools, mgt systems, etc)
• Perform maintenance and/or advanced configuration of equipment in order to protect the network from emerging cyber threats
• Experience with Cloud Infrastructure/AWS-based technology
• Experience using security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, and EMET
• Conduct forensic traffic/log analysis to isolate issues or respond to analyst alerts
• Respond to escalated troubleshooting requests
• Maintain and administer network infrastructure standards, documentation and fault tolerance
• Present Monitoring/Test Results and Reports as required
• Perform/support integration testing as required
• Participates in special projects as required.
• Ability to review Plan of Action and Milestones (POA&Ms) and conduct a technical decomposition categorization, remediation, and lien resolution
• Execute remediation process to implement technical solutions to address vulnerability findings via ACAS security scan.
• Experience installing, hardening, deploying, documenting, and troubleshooting network perimeter security technologies.
• Experience and scripting ability on Unix and/or RHEL OS
• Experienced with complex Microsoft macros, and PowerShell scripts
• Basic understanding of Windows Enterprise AD architecture and VMWare Virtualization
• Must be proficient in network routing/vlan technology

Desired Knowledge, Experience and Skills:

• CISSP certification or equivalent (CAP, GSLC, CISM)
• System administration experience
• Network engineering experience

System design and development experience

WHAT YOU'LL NEED TO SUCCEED:

EDUCATION

Bachelors Degree in Computer Science or a related technical discipline, or the equivalent combination of education, professional training or work experience.

QUALIFICATIONS

10-15 years of related experience in data security administration.

Location: Customer Site

US Citizenship Required

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY

Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.