Information Assurance Engineer

General Dynamics Mission Systems, Inc•Bloomington, MN

4d•$118,570 - $130,000

About The Position

General Dynamics Mission Systems has an immediate opening for an Information Assurance Security Professional. The role offers an opportunity to support defense and intelligence technology and work with customers on national security missions. The candidate will serve as an Information System Security Officer (ISSO) supporting multiple Special Access Programs and administering Information Assurance cybersecurity duties for government customers. The ISSO supports Assessment and Authorization activities, including documentation preparation, system configuration and validation, and certification testing. The role also covers security sustainment, such as hardware and software change management, account management, media protection, user interfaces, and file transfers; self-inspections; audit trail reviews; and security education and awareness. The ISSO coordinates with system administrators and IT staff to ensure configuration requirements are implemented and functional, and conducts technical and nontechnical reviews and audits as prescribed by the Information Systems Security Manager. The position requires a self-starter able to multitask, manage time in a dynamic environment, and work with minimal supervision. The successful candidate will use strong written, verbal, analytical, organizational, and customer service skills to address complex compliance and security problems.

Requirements

Bachelor's degree in Engineering or a related Science or Mathematics field and at least 5 years of relevant experience, or a Master's degree and at least 3 years of relevant experience.
Department of Defense Top Secret security clearance required at time of hire.
U.S. citizenship required due to the nature of work performed within the facilities.
Understanding of cybersecurity specifications such as RMF, JSIG, ICD-503, and NIST SP 800-53.
Experience implementing government security requirements, including technical computer/network system auditing.
Training and proficiency in Assured File Transfer (AFT) processes and tools.
Experience with security assessment and hardening tools such as STIGs, SCAP, ACAS, and Nessus.
Strong writing, speaking, analytical, and customer service skills.
Ability to multitask and manage time efficiently in a dynamic environment with minimal supervision.

Nice To Haves

Systems administration experience is highly desirable.
Comprehensive knowledge of NISPOM, JSIG, ICD-503, NIST SP 800-53, and CNSSI 1253.
DoD 8570 IAM-I level professional certification, such as Security+ CE, CAP, or GSLC, or ability to obtain one within six months of hire.

Responsibilities

Support system security categorization, security requirements selection and analysis, security control assessments, and continuous monitoring.
Execute or support Assessment and Authorization activities, including development of security documentation such as System Security Plans, Security Assessment Reports, SCTMs, and POA&Ms in compliance with Information Assurance policy.
Perform weekly system audit reviews, media reviews, and hardware and software configuration management.
Execute security testing and evaluation to ensure security controls are implemented correctly.
Support vulnerability assessment and mitigation throughout a system’s life cycle.
Conduct Information Assurance security education and training for system users on appropriate risk mitigation strategies.
Perform incident response and cleanup actions when necessary, according to company or customer directions.
Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and procedures outlined in the System Security Plan.
Assume ISSM responsibilities as assigned by the Region Manager and/or in the absence of the ISSM.
Coordinate with system administrators and IT staff to ensure configuration requirements are implemented and functional.
Conduct technical and nontechnical reviews and audits as prescribed by the Information Systems Security Manager.
Maintain contact with external customer security professionals.
Participate in or lead security work groups.