Senior Cybersecurity Engineer

General Dynamics Information Technology; Springfield (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

General Dynamics Information Technology in Springfield, VA seeks a Senior Cybersecurity Engineer to own mission-critical DoD cybersecurity programs, leading security design, risk assessments, and authorization strategies across diverse environments.

You will mentor engineers, drive RMF/ATO processes, and develop AI-enabled workflows for vulnerability detection and continuous compliance, deploying tools like ACAS, Splunk, HBSS, and eMASS to defend national security.

Qualifications

• 10+ years of cybersecurity experience with RMF, ATO, and system accreditation.
• Proven leadership in cybersecurity architecture and RMF compliance.
• Experience designing/integrating AI/ML security solutions.
• Hands-on with integrating AI/ML into security workflows.

Responsibilities

• Lead DoD RMF A&A for complex systems.
• Own RMF docs: SSPs, POA&Ms, SCTMs, risk assessments.
• Guide teams to ATO/IATO achievement and continuous monitoring.
• Architect and implement advanced cybersecurity controls.
• Utilize AI/ML to develop capabilities across cybersecurity apps.
• Design AI-enabled workflows for vulnerability detection and risk scoring.
• Deploy and administer tools like ACAS, Splunk, HBSS, eMASS.
• Mentor junior engineers and promote knowledge sharing.
• Track evolving cybersecurity trends and DoD guidance.

Skills

RMF compliance

Leadership

Vulnerability assessment

AI/ML in security

ATO lifecycle

DoD tooling

Stakeholder communication

Education

Bachelor’s degree in Cybersecurity

Tools

ACAS

Splunk

HBSS

eMASS

SIEM

Job description

Lead with purpose. Defend with expertise.

Join GDIT as a Senior Cybersecurity Engineer and take ownership of mission-critical cybersecurity programs that protect Department of Defense (DoD) systems. You’ll serve as a key technical authority, leading security design, risk assessments, and authorization strategies across diverse, high-impact environments.

As a senior team member, you’ll work both independently and collaboratively, mentor junior engineers, and drive system accreditation from strategy through execution—delivering proactive security and continuous compliance in support of national defense.

What You’ll Do:

• Lead thedevelopment, assessment, and authorization (A&A)of complex DoD systems following RMF processes (includingDAAPM 2.2, JSIG Rev 4, ICD-503).
• Own the creation and lifecycle management ofRMF documentation(SSPs, POA&Ms, SCTMs, risk assessments, and related artifacts).
• Guide teams through successfulATO/IATO achievementand ensurecontinuous monitoring and complianceacross systems.
• Architect and implementadvanced cybersecurity controls, ensuring resilience against evolving threats.
• Leverage artificial intelligence and machine learning technologies to develop, integrate, and operationalize innovative capabilities across cybersecurity applications, including threat detection, anomaly identification, automated analysis, and defensive decision support.
• Design and implement AI-enabled workflows that support automated vulnerability detection, continuous compliance checks, and prioritized remediation recommendations based on real-time risk scoring.
• Direct the deployment and administration ofcyber tools(e.g., ACAS, Splunk, HBSS) and security platforms (e.g.,eMASS).
• Leadvulnerability scanning, analysis, and mitigation strategies, while supporting incident response planning and readiness.
• Collaborate with technical leads, mission stakeholders, and leadership to developsecure, scalable solutionsaligned with DoD requirements.
• Evaluate and enhancesystem hardening, configuration management, and patching processes, includingAI-assisted prioritization of patching based on exploitability, asset criticality, and threat intelligence.
• Act as amentorto junior and mid-level engineers, cultivating a culture of knowledge sharing and technical growth.
• Track and integrateevolving cybersecurity trends, threat intelligence, and DoD security guidance into ongoing support activities.

Education:

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.

Years of Experience:

10+ years of experience in cybersecurity, with deep knowledge of RMF, ATO processes, and system accreditation.

Preferred Certifications (one or more):

• Security & Governance: CISSP, CCSP, CISM, CEH, CAP
• Cloud & Platforms: AWS SysOps Administrator, Cloud+, Linux Essentials, Splunk
• Tools & Management: ITILv4, Project+, eMASS, HBSS, ACAS

Required Skills & Qualifications:

• Demonstrated leadership incybersecurity architecture,RMF compliance, andsystem accreditation.
• Strong technical experience withvulnerability assessment,risk mitigation, andATO lifecycle management.
• Experience designing or integrating AI/ML-based cybersecurity solutions, such as anomaly detection models, behavioral analytics, or automated risk scoring to drive mitigation actions, is highly desirable.
• Hands-on familiarity with integrating AI/ML outputs into security workflows (e.g., feeding model results into SIEMs, SOAR platforms, ticketing systems, or patch management tools).
• Fluency withDoD cybersecurity tools, processes, andsecure configurationpractices (e.g., STIGs, hardening guides).
• Ability tolead projects independently, communicate security posture to technical and executive stakeholders, and influence secure design decisions.
• Proven experience inmission-driven environments, effectively handling complexity, urgency, and changing priorities.

Why GDIT:

At GDIT, your expertise shapes national security outcomes. We empower you to:

• Lead with autonomy and authority.
• Tackle meaningful, mission-first challenges.
• Grow professionally with access to training and certification support.
• Thrive in a collaborative, technically elite environment.

Be part of something greater. Own your career. Make an impact with GDIT.

Location: Springfield, VA

Citizenship: U.S. Citizenship Required.