Information Systems Security Engineer – TS/SCI required

General Dynamics Information Technology•Washington, DC

2d•$164,382 - $212,750•Onsite

About The Position

Transform technology into opportunity as an Information System Security Engineer (ISSE) with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you’ll be at the forefront of innovation and play a meaningful part in improving how agencies operate. At GDIT, our people are our differentiator. As an ISSE, you will help ensure today is safe and tomorrow is smarter. HOW AN ISSE WILL MAKE AN IMPACT Responsible for supporting Enterprise Infrastructure Engineering and Operations solutions and strategic adherence to all aspects of the Information Assurance (IA) program as stipulated by various U.S. Government requirements including (but not limited to): Director of Central Intelligence Directives (DCID), IC Directive (ICD) 503 and associated NIST publications. Conducts software and systems engineering and software systems research to develop new capabilities, ensuring cybersecurity is fully integrated. Conducts comprehensive technology research to evaluate potential vulnerabilities in cyberspace systems Designs, develops, tests, and evaluates information system security throughout the systems development life cycle Tests, implements, deploys, maintains, and administers the infrastructure hardware and software Conducts risk assessment and provides recommendations for application design Prepares Assessment and Authorization (A&A) documents and procedures, as well as interfaces with other IA team members, program personnel, and Government security representatives. Maintains system -XACTA records, uploads artifacts, updates security controls, and initiates workflow for steps in RMF process. Reviews and analyze system implementation plans. Identified corrective actions/mitigation strategies to achieve/sustain RMF compliance. Develop/maintain Plans of Action & Milestones (POA&M) which account for confidentiality, integrity, and availability. Has developed trusted relationships with customers Coach and provide guidance to less experienced professionals May serve as a team or task lead WHAT YOU’LL NEED TO SUCCEED: Education: Bachelor of Science Degree, or a related technical discipline, or the equivalent combination of education, technical certifications or training, or work experience.

Requirements

10 + years of related experience
US Citizenship Required
Minimum 10 years of cyber/information assurance experience.
Strong written and oral communication skills.
Ability to multi-task and shift with changing priorities and projects.
TS/SCI Required
Candidate must meet DoD 8140 for ISSE Role: CISSP, CISSP-ISSAP, CISSP-ISSEP, GCLD, GDSA, or GICSP
Candidates must be willing and able to attain a CI Polygraph.

Nice To Haves

Progressively responsible information assurance experience in ICD 503 certification and accreditation.
Experience with NIST Special Publication 800-37 Revision 1, Guide for Applying the Risk Management Framework to Federal Information Systems‟, Committee on National Security Systems Instructions (CNSSI) 1253, and NIST SP 800- 53 Revisions 3 and 4, SP800-39, SP 800-30.
Demonstrated experience in transitioning systems/software to IC Information Technology Environment (ITE) and in-depth knowledge of IC ITE services.
Demonstrated experience with designing, developing, testing, and evaluating information system security thought the SDLC
Demonstrated experience testing, implement
Experience with the Xacta application.

Responsibilities

Responsible for supporting Enterprise Infrastructure Engineering and Operations solutions and strategic adherence to all aspects of the Information Assurance (IA) program as stipulated by various U.S. Government requirements including (but not limited to): Director of Central Intelligence Directives (DCID), IC Directive (ICD) 503 and associated NIST publications.
Conducts software and systems engineering and software systems research to develop new capabilities, ensuring cybersecurity is fully integrated.
Conducts comprehensive technology research to evaluate potential vulnerabilities in cyberspace systems
Designs, develops, tests, and evaluates information system security throughout the systems development life cycle
Tests, implements, deploys, maintains, and administers the infrastructure hardware and software
Conducts risk assessment and provides recommendations for application design
Prepares Assessment and Authorization (A&A) documents and procedures, as well as interfaces with other IA team members, program personnel, and Government security representatives.
Maintains system -XACTA records, uploads artifacts, updates security controls, and initiates workflow for steps in RMF process.
Reviews and analyze system implementation plans.
Identified corrective actions/mitigation strategies to achieve/sustain RMF compliance.
Develop/maintain Plans of Action & Milestones (POA&M) which account for confidentiality, integrity, and availability.
Has developed trusted relationships with customers
Coach and provide guidance to less experienced professionals
May serve as a team or task lead