Information Assurance Security Engineer - Top Secret

General Dynamics IT; Springfield (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

General Dynamics Information Technology seeks an Information Assurance Security Engineer to support a TS/SCI cleared intelligence customer in Springfield, VA or Arnold, MO. You will help ensure today is safe and tomorrow is smarter by delivering security engineering across the system lifecycle.

The role requires 5+ years of experience, knowledge of ICD 503, IAM II, and Cloud/AWS, plus incident response and RMF expertise.

Qualifications

• 5+ years of related experience in information security.
• Active TS/SCI with polygraph eligibility and US citizenship.
• Familiar with RMF, ICD 503, and cloud-based solutions.

Responsibilities

• Write information security policy drafts and coordinate certification/ accreditation.
• Advise on system design/architecture and evaluate security controls.
• Manage multi-agency information sharing and integration security.
• Lead incident response, access approvals, and audit log review.
• Supervise junior engineers and ensure compliance with security directives.
• Provide security training and implement corrective measures as needed.

Skills

Information System Security

Security Infrastructure

Security Tools

Education

Bachelor's Degree in Computer Science or related discipline

Tools

ICD 503

IAM II certification

AWS Cloud

Job description

Type of Requisition

Regular

Clearance Level Must Currently Possess

Top Secret/SCI

Clearance Level Must Be Able to Obtain

Top Secret SCI + Polygraph

Public Trust/Other Required

None

Job Family

Cyber and IT Risk Management

Job Qualifications

• Skills: Information System Security, Security Infrastructure, Security Tools
• Certifications: None
• Experience: 5 + years of related experience
• US Citizenship Required: Yes

Job Description

At GDIT, people are our differentiator. As an Information Assurance Security Engineer, you will help ensure today is safe and tomorrow is smarter. Our work depends on a TS/SCI cleared Information Security Engineer joining our team to support our intelligence customer in Springfield, VA or Arnold, MO.

HOW AN INFORMATION ASSURANCE SECURITY ENGINEER WILL MAKE AN IMPACT

General Dynamics Information Systems (GDIT) is seeking a Security Engineer to provide expert technical services on all aspects of Information Security.

• Responsible for writing information security policy drafts, writing and reviewing Memorandum of Agreements and coordinating and managing all aspects of the Certification and Accreditation.
• Advise and assess system design/architecture as well as defining, designing and evaluating information security systems.
• Manage multi-agency information sharing and integration security.
• Maintain affiliations with high-level personnel at multiple agencies and organizations involved in Information Security.
• Tasking includes incident response, system access approval, audit log review, Configuration Control Board and daily consultations/consulting on a wide variety of security issues.
• Report, document and investigate all security related incidents; assist with development and implementation of corrective measures.

Requirements

• Active TS/SCI with CI Polygraph. Can sponsor for polygraph
• Bachelors Degree in Computer Science or a related technical discipline, or the equivalent combination of education, professional training or work experience.
• 5+ years of related experience in data security administration.
• Candidate must have knowledge of and experience with ICD 503 and be familiar with Cloud Infrastructure/AWS-based solutions.
• Candidate must possess IAM II certification to start in accordance with DOD 8570.1M. This position is defined as in 8570.1M chapter 4, pg 35. Candidate is required to understand how our customer's RMF process work and how systems security requirements will be met.
• System design and development experience (includes defining, planning, designing, evaluating information security systems, assessing architecture and current hardware limitations, defining and designing system specifications, input/output processes and working parameters for hardware/software compatibility).
• Performs a variety of complex tasks associated with information security ranging from the design of security components to complex architectures.
• Supervise the work of other engineers performing a variety of information security tasks.

Responsibility and Duties

• Candidate will work with all IT groups to build IT systems with security planned from the start. Work with developers, system engineers, project managers, and users to identify the level of protection systems will need. Understand and be able to identify what group or process will satisfy security requirement.
• Act as the representative of the Information System Security Manager ensuring compliance with IS security procedures.
• Support efforts to operate, maintain, and dispose of information system materials in accordance with security directives, policies and practices and as annotated in Systems Security Plans.
• Generate and implementation of requisite security training ensuring user security awareness of responsibilities prior to system access.
• Initiate protective and corrective measures when incident or vulnerabilities are discovered.
• Ensure IA hardware and software complies with security configuration guides.
• Implement and enforce IA policies and procedures as defined by A&A documentation.
• Ensure users are aware of their IA responsibilities.
• The ability to work on multiple projects/tasks at once and operate in a dynamic, fast-paced, team-oriented environment.
• Perform Operations & Sustainment (O&S) functions for the NCE network security infrastructure (firewalls, web gateways, mail gateways, ids, load balancers, performance monitoring tools, mgt systems, etc)
• Perform maintenance and/or advanced configuration of equipment in order to protect the network from emerging cyber threats
• Experience with Cloud Infrastructure/AWS-based technology
• Experience using security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, and EMET
• Conduct forensic traffic/log analysis to isolate issues or respond to analyst alerts
• Respond to escalated troubleshooting requests
• Maintain and administer network infrastructure standards, documentation and fault tolerance
• Present Monitoring/Test Results and Reports as required
• Perform/support integration testing as required
• Participates in special projects

Job Location

Springfield, VA or Arnold, MO

Clearance Information

Top Secret/SCI clearance occupied, with ability to obtain Top Secret SCI + Polygraph, and must be active TS/SCI with CI Polygraph. Can sponsor for polygraph.