Information Assurance Security Engineer - Top Secret

General Dynamics Information Technology•Springfield, MO

3d•Onsite

About The Position

General Dynamics Information Technology (GDIT) is seeking an Information Assurance Security Engineer to provide expert technical services across information security for an intelligence customer in Springfield, Virginia, or Arnold, Missouri. The role supports the design, implementation, operation, and maintenance of secure systems and network infrastructure. The engineer advises on system architecture and security requirements, supports the customer’s Risk Management Framework (RMF) process, and helps ensure compliance with security directives, policies, and accreditation documentation. The position includes security policy and agreement development, certification and accreditation coordination, incident response, access approvals, audit-log review, and vulnerability remediation. The engineer also performs operations and sustainment for network security infrastructure, analyzes forensic traffic and logs, troubleshoots escalated issues, documents and reports results, and works with developers, system engineers, project managers, users, and other IT groups to build security into systems from the outset. The role may supervise other engineers and requires managing multiple tasks in a dynamic, team-oriented environment.

Requirements

Active Top Secret/SCI clearance with CI polygraph; the posting states a polygraph can be sponsored.
U.S. citizenship is required.
Bachelor’s degree in Computer Science or a related technical discipline, or an equivalent combination of education, professional training, or work experience.
At least 5 years of related experience in data security administration.
Knowledge of and experience with ICD 503.
Familiarity with cloud infrastructure and AWS-based solutions.
IAM II certification required to start, in accordance with DoD 8570.1M.
Understanding of the customer’s RMF process and how system security requirements are met.
Experience with system design and development and defining, planning, designing, and evaluating information security systems.
Experience with cloud infrastructure or AWS-based technology.
Experience using security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, and EMET.
Experience installing, hardening, deploying, documenting, and troubleshooting network perimeter security technologies.
Scripting ability on Unix and/or RHEL operating systems.
Experience with complex Microsoft macros and PowerShell scripts.
Basic understanding of Windows Enterprise Active Directory architecture and VMware virtualization.
Proficiency in network routing and VLAN technology.
Ability to work on multiple projects or tasks at once in a dynamic, fast-paced, team-oriented environment.

Nice To Haves

CISSP certification or equivalent, such as CAP, GSLC, or CISM.
System administration experience.
Network engineering experience.

Responsibilities

Draft information security policies and write and review Memoranda of Agreement.
Coordinate and manage Certification and Accreditation activities and support the customer’s RMF process.
Advise on and assess system design and architecture; define, design, and evaluate information security systems and requirements.
Manage security for multi-agency information sharing and integration, and maintain affiliations with relevant personnel at agencies and organizations.
Perform incident response, system access approval, audit-log review, Configuration Control Board participation, and security consultations.
Report, document, and investigate security incidents and help develop and implement corrective measures.
Supervise the work of other engineers performing information security tasks.
Work with IT groups, developers, system engineers, project managers, and users to identify system protection needs and satisfy security requirements.
Represent the Information System Security Manager in ensuring compliance with information system security procedures.
Support operation, maintenance, and disposal of information system materials in accordance with security directives, policies, practices, and Systems Security Plans.
Develop and implement security training and ensure users understand their security responsibilities before system access and on an ongoing basis.
Initiate protective and corrective measures when incidents or vulnerabilities are discovered.
Ensure IA hardware and software comply with security configuration guides and implement and enforce policies and procedures defined in A&A documentation.
Perform operations and sustainment functions for network security infrastructure, including firewalls, web and mail gateways, IDS, load balancers, performance monitoring tools, and management systems.
Maintain and configure equipment to protect the network from emerging cyber threats.
Conduct forensic traffic and log analysis to isolate issues or respond to analyst alerts, and respond to escalated troubleshooting requests.
Maintain and administer network infrastructure standards, documentation, and fault tolerance.
Present monitoring and test results and reports, and perform or support integration testing.
Review POA&Ms and perform technical decomposition, categorization, remediation, and lien resolution.
Remediate vulnerability findings, including implementing technical solutions identified through ACAS security scans.
Install, harden, deploy, document, and troubleshoot network perimeter security technologies.
Participate in special projects and manage multiple projects or tasks in a dynamic, fast-paced, team-oriented environment.

Benefits

Comprehensive benefits and wellness packages.
401(k) plan with company match.
Competitive pay.
Paid time off, including vacation, sick, and personal time, and holidays.
Medical plan options, including some with Health Savings Accounts.
Dental plan options.
Vision plan.
Paid parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.