Information Systems Security Engineer

General Dynamics Information Technology•USA VA Home Office (VAHOME), VA

11d•$113,900 - $154,100•Remote

About The Position

GDIT is seeking an Information Systems Security Engineer with more than five years of experience in application modernization to help modernize the Delivery Operations Information System (DOIS) for the United States Postal Service (USPS). The role is responsible for securing the modernization project by implementing security measures and maintaining compliance with federal security standards. The engineer will use AI tools, including GitHub Copilot, for security automation and vulnerability management. The position is remote and requires the ability to obtain and maintain a Public Trust and pass a government background screening that includes detailed forms and fingerprinting. Candidates must also meet the stated U.S. residency requirements. Scheduled weekly hours are 40, and travel is less than 10%.

Requirements

At least 5 years of experience in information security engineering, with a strong focus on cloud security.
Experience with AI tools, particularly GitHub Copilot, for security automation and vulnerability management.
Strong understanding of federal security standards and compliance requirements, such as FISMA, NIST, and FedRAMP.
Proficiency in security tools and frameworks such as Nessus, Splunk, and NIST RMF.
Excellent analytical, problem-solving, and communication skills.
Ability to manage multiple tasks effectively and meet deadlines.
Ability to collaborate with developers, business analysts, and stakeholders.
A bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field is preferred but not required. Without a relevant college degree, an additional four years of relevant work experience is required.
Must be able to obtain and maintain a Public Trust and pass the required government background screening.
Must meet the stated U.S. residency requirements.

Nice To Haves

Security certifications such as CISSP, CISM, or AWS Certified Security - Specialty.
Experience in a USPS environment or similar federal IT projects.
Cybersecurity certification such as Certified Ethical Hacker (CEH).

Responsibilities

Develop, implement, and maintain security policies, procedures, and controls aligned with USPS security requirements and federal standards such as FISMA and NIST RMF.
Use AI tools such as GitHub Copilot to automate security tasks, vulnerability scans, and code reviews.
Conduct security assessments, vulnerability scans, and penetration testing using tools such as Nessus, Splunk, and SonarQube.
Implement and monitor protections for sensitive data, including encryption standards and access controls.
Work with development and operations teams to integrate security practices into CI/CD pipelines and DevSecOps processes.
Prepare and maintain System Security Plans (SSP), Risk Mitigation Plans (RMP), and Plans of Action and Milestones (POA&M).
Perform continuous monitoring and real-time security incident response using tools such as CloudWatch, GuardDuty, and AWS Security Hub.
Collaborate with the USPS Chief Information Security Office (CISO) on compliance with USPS security architecture and governance.
Provide security training and awareness programs to development and operational staff.

Benefits

401(k) with company match.
Medical plan options, including options with Health Savings Accounts.
Dental insurance.
Vision plan.
Paid education and certifications.
Professional growth opportunities and internal mobility support.
Paid vacation, sick and personal time, and holidays.
Paid parental leave, including a paid family leave program of up to 160 hours in a rolling 12-month period for eligible employees.
Military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life insurance and other insurance offerings, including accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
Full flex work weeks where possible.