Advanced Information Assurance Engineer

General Dynamics Mission Systems, Inc•Manassas, VA

4d•$112,924 - $125,275

About The Position

As a Cybersecurity / Endpoint Security Engineer, you will apply cybersecurity and systems engineering knowledge to implement, administer, test, and maintain endpoint detection and response (EDR) and extended detection and response (XDR) systems, while contributing to broader cybersecurity and Information Assurance activities. You will work with systems, infrastructure, integration, test, and cybersecurity teams to analyze, implement, and verify security requirements in Department of Defense computing environments. Approximately 50–75% of the role focuses on EDR/XDR engineering, including installation and configuration of commercial off-the-shelf (COTS) security products, endpoint management systems, policy development, security testing, troubleshooting, upgrades, and maintenance. The remaining effort includes vulnerability and configuration scanning, analysis and reporting of findings, remediation tracking, collection of objective evidence, and development and coordination of cybersecurity documentation. The role requires independently planning and executing assigned security engineering tasks, exercising sound technical judgment, and coordinating resolution of system security concerns with multidisciplinary engineering teams. A Department of Defense Secret clearance is required at hire; U.S. citizenship is required.

Requirements

Bachelor's degree in Engineering or a related Science or Mathematics field and at least 5 years of relevant experience, or a Master's degree and at least 3 years of relevant experience.
Department of Defense Secret security clearance at time of hire; must meet eligibility requirements for access to classified information.
U.S. citizenship.
Proficient understanding and application of systems engineering and cybersecurity concepts, principles, and practices.
Working knowledge of Windows and/or Linux operating systems, containerized workloads, and fundamental system administration practices.
Practical experience installing, configuring, maintaining, and troubleshooting COTS software.
Familiarity with cybersecurity specifications and guidance, including RMF, DISA STIGs, and other government security requirements, and ability to apply applicable guidance.
Proficient understanding of security testing, verification, and validation processes.
Ability to independently investigate software, service, configuration, and connectivity issues and verify corrective actions.
Ability to assess technical and cybersecurity findings, recognize system security risks, and clearly communicate concerns and recommended actions.
Proficient written and verbal communication skills.
Proficiency in Microsoft Office applications.
Ability to plan and execute assigned project tasks, coordinate technical activities, and communicate status, risks, and dependencies.

Nice To Haves

Hands-on experience administering and troubleshooting Trellix ePolicy Orchestrator (ePO), Trellix Agent, Endpoint Security (ENS), HBSS, Microsoft Defender for Endpoint, CrowdStrike Falcon, or other EDR/XDR products.
Experience with Istio, Cilium, Calico, or other technologies supporting container networking and security.
Experience independently developing, modifying, implementing, and testing endpoint security policies.
Experience executing assessments and analyzing findings using ACAS/Tenable Nessus, Evaluate-STIG, DISA STIGs, SCAP Compliance Checker (SCC), Trivy, or similar cybersecurity assessment tools.
Experience contributing to DoD RMF and Assessment and Authorization (A&A) activities.
Experience administering and securing Windows Server, containers, and/or Red Hat Enterprise Linux (RHEL).
Working knowledge of Active Directory, Group Policy, certificates, firewalls, and/or enterprise networking.
Experience applying PowerShell, Bash, Python, Ansible, or other scripting and automation technologies to improve engineering efficiency and repeatability.
Experience with Navy CANES or ESS environments, PLG development, configuration management, or deployed system validation.
Demonstrated ability to improve security implementation, testing, documentation, or operational management practices.

Responsibilities

Install, configure, maintain, test, and troubleshoot EDR/XDR products and associated endpoint components.
Administer EDR/XDR products and associated technologies.
Develop, configure, test, deploy, and maintain system security policies.
Validate configuration and policy changes in representative lab or test environments with applicable security policies and controls enforced.
Monitor and assess endpoint health, agent communications, security events, content currency, and policy application across supported systems.
Investigate agent communication, policy enforcement, and application compatibility issues, identify contributing security controls, and verify corrective actions through testing.
Evaluate interactions between application, platform, and site security policies, including policy inheritance and required exceptions.
Contribute to system security design, security requirements analysis, and allocation of applicable requirements to system components.
Plan and execute security testing and evaluate implementation of applicable security requirements.
Execute and review vulnerability and security configuration scans; analyze, document, and track findings through remediation or disposition.
Implement and assess applicable DISA STIG requirements and document results.
Develop and maintain installation procedures, Policy Layout Guides (PLGs), policy assignments, configuration-controlled packages, security documentation, and supporting technical evidence.
Collect and maintain cybersecurity Objective Quality Evidence (OQE), prepare assigned cybersecurity compliance and A&A documentation, and coordinate documentation review and routing.
Assess system security threats and risks and recommend mitigation measures throughout the program life cycle.
Select appropriate standards, processes, procedures, and tools for assigned security engineering activities.
Coordinate with engineering and cybersecurity teams to investigate findings, recommend corrective actions, and verify remediation.
Communicate task status, risks, and dependencies while coordinating technical activities with project leaders and multidisciplinary engineering teams.