Cyber Security Engineer

General Dynamics Mission Systems, Inc•Pittsfield, MA

1d•$112,924 - $125,275•Hybrid

About The Position

As an Advanced Systems Engineer - Portfolio Cybersecurity Lead for Fleet Ballistic Missile Auxiliary and Training Systems, you will coordinate the day-to-day cybersecurity systems engineering work across a portfolio of simulation, test, training, and support systems serving the Ohio-class fleet and future Columbia-class submarines. Our portfolio develops, maintains, and enhances systems that allow engineering teams to integrate and test Fire Control capabilities in lab environments and help prepare the fleet to operate those capabilities. You will help establish and carry out a consistent cybersecurity engineering approach across the portfolio while tailoring implementation to each system's mission, architecture, operating environment, life-cycle phase, and authorization boundary. You will lead the engineering work that turns cybersecurity policy and risk decisions into implementable system requirements, designs, configurations, tests, and objective evidence. You will coordinate cybersecurity activities throughout the Risk Management Framework life cycle, including requirements and control allocation, system security documentation, control implementation statements, risk and vulnerability analysis, verification planning, assessment evidence, remediation plans, Plans of Action and Milestones inputs, continuous monitoring artifacts, and authorization package support. This role combines technical leadership with direct engineering execution. You will perform security analyses, contribute to secure system and network architectures, evaluate designs and proposed changes, support system hardening, investigate vulnerabilities and noncompliant configurations, develop and execute verification methods, and work with engineering teams to implement and validate practical mitigations. You will help ensure that cybersecurity is built into the system development life cycle rather than treated only as an end-stage compliance activity. You will lead and mentor systems engineers performing cybersecurity work across the portfolio. You will establish clear priorities, delegate and coordinate technical tasks, review work products and evidence, promote reusable methods and lessons learned, and drive risks, findings, dependencies, and corrective actions to closure. You will partner closely with systems, software, hardware, infrastructure, integration, test, configuration management, program cybersecurity, security, and customer teams to provide clear status, risk assessments, options, and recommendations.

Requirements

Bachelor's degree in Systems Engineering, or a related Science, Engineering or Mathematics field, plus a minimum of 5 years of relevant experience; or Master's degree, plus a minimum of 3 years of relevant experience.
Department of Defense Secret security clearance is preferred at time of hire.
Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information.
U.S. citizenship is required.

Nice To Haves

Experience leading cybersecurity or systems security engineering across multiple systems, products, programs, or authorization boundaries.
Experience applying the Department of Defense Risk Management Framework and NIST guidance, including NIST SP 800-37, SP 800-53 and 800-53A, or systems security engineering concepts from NIST SP 800-160.
Experience translating security controls, policies, and customer requirements into allocated, traceable, and verifiable engineering requirements.
Experience developing and maintaining system security plans, security architecture descriptions, control implementation statements, risk assessments, assessment evidence, remediation plans, Plans of Action and Milestones, or continuous monitoring artifacts.
Experience supporting system authorization activities using eMASS or a comparable governance, risk, and compliance environment.
Experience applying Security Technical Implementation Guides, Security Requirements Guides, secure configuration baselines, vulnerability assessment tools, and approved remediation or mitigation processes.
Experience with cybersecurity architecture, threat modeling, attack-surface analysis, system boundary analysis, network security, identity and access management, auditing, data protection, or cyber resiliency.
Hands-on experience securing and troubleshooting Linux, Windows, networked, virtualized, or integrated lab systems.
Experience developing security verification procedures, assessing control implementation, analyzing test or scan results, and documenting objective evidence.
Experience with systems engineering life-cycle activities, requirements management and traceability, IBM DOORS or similar tools, system architecture, integration, verification, and configuration management.
Experience leading technical teams or workstreams, mentoring engineers, reviewing technical products, and coordinating work across disciplines without relying on formal reporting authority.
Experience communicating cybersecurity risks, findings, design trades, and recommended actions to engineering teams, program leadership, customers, security representatives, and assessors.
Experience with defense systems, Fire Control programs, simulation systems, training systems, or other mission-critical integrated systems.
Relevant cybersecurity certification or DoD workforce qualification appropriate to the assigned work, where required by the program.
Proficient understanding and application of systems engineering, systems security engineering, cybersecurity risk management, and technical standards.
Demonstrated ability to make cybersecurity requirements actionable for engineers and to verify that the resulting implementation works as intended.
Ability to balance cross-portfolio coordination, rigorous documentation, and hands-on technical problem-solving.
Sound technical judgment when evaluating vulnerabilities, design alternatives, compensating mitigations, residual risk, and the need to elevate decisions.
Collaborative leadership style that creates clarity, develops engineers, holds owners accountable, and builds cybersecurity capability across teams.
Ability to produce precise, review-ready technical documentation and connect claims to objective implementation and test evidence.
Strong written, presentation, and interpersonal communication skills, including the ability to explain complex cybersecurity issues to both technical and program audiences.
Ability to build productive working relationships across engineering, program, security, assessment, and customer organizations.
Awareness of business objectives and the ability to connect cybersecurity decisions to mission, technical, cost, schedule, and delivery outcomes.
Commitment to ongoing professional development for yourself and others.
Identifies opportunities to apply AI for continuous improvement and innovation.

Responsibilities

Coordinate the day-to-day cybersecurity systems engineering work across a portfolio of simulation, test, training, and support systems.
Establish and carry out a consistent cybersecurity engineering approach across the portfolio.
Tailor cybersecurity implementation to each system's mission, architecture, operating environment, life-cycle phase, and authorization boundary.
Lead engineering work that turns cybersecurity policy and risk decisions into implementable system requirements, designs, configurations, tests, and objective evidence.
Coordinate cybersecurity activities throughout the Risk Management Framework life cycle.
Perform security analyses, contribute to secure system and network architectures, evaluate designs and proposed changes, support system hardening, investigate vulnerabilities and noncompliant configurations, develop and execute verification methods, and work with engineering teams to implement and validate practical mitigations.
Ensure cybersecurity is built into the system development life cycle.
Lead and mentor systems engineers performing cybersecurity work across the portfolio.
Establish clear priorities, delegate and coordinate technical tasks, review work products and evidence, promote reusable methods and lessons learned, and drive risks, findings, dependencies, and corrective actions to closure.
Partner closely with various teams to provide clear status, risk assessments, options, and recommendations.