Apply on Employer Site

General Dynamics Mission Systems · 1 month ago

Information Assurance Engineer

Pittsburgh, PA

Full-time

Onsite

Entry, Mid Level

$95K/yr - $106K/yr

2+ years exp

General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. They are seeking an Information Assurance Engineer to support the development of security requirements and collaborate with teams to implement and verify security controls in high-security environments.

AerospaceBusiness Information SystemsInformation ServicesInformation TechnologyNational SecuritySensor

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Supports the development of RMF body of evidence for security requirements, including security plans, security testing plans, Security Control Traceability Matrices, and System Impact Analyses

Performs routine security verification tasks using manual and automated methods (Cyber Test Procedures and vulnerability scans)

Supports the execution of Assessment and Authorization events

Collaborates with Development and Test teams to plan, implement, and support the verification of security requirements

Actively participates in an Agile team to organize, prioritize, and status work efforts

Champions security perspective for decisions related to implementing and verifying security controls in high-security, cloud-native DevSecOps environments

Self-directed and self-starting ability

Strong written and verbal communication skills

Excellent ability to communicate issues, impacts, and corrective actions

Strong security mindset and comfortable questioning system behavior inconsistent with key security principles

Familiar with NIST SP 800-53 & Risk Management Framework (RMF). Experience with FedRAMP is a plus

Familiar with Linux and Windows operating systems and their security features

Experience with Secure Technical Implementation Guides (STIGs)

Understanding of the RMF Assessment and Authorization process

Experience with automation, virtualization, containerized application deployment and orchestration, and cloud-native solutions

Strong use and understanding of systems engineering concepts, principles, and theories

Contributes to the achievement of business objectives

Recognizes and incorporates various security designs and lessons learned

Able to sell concepts and ideas effectively

Able to work directly with customers

Proficient in reporting relevant cyber systems engineering design

Regular contact with senior levels of security workgroups

Ability to lead security workgroups

Works under limited direction

Frequent contact with project leaders, other professionals within the Engineering department, project teams, and external customers’ security professionals

Creative thinker and good multi-tasker

Strong understanding of Microsoft Office applications

Must be able to obtain a TS/SCI Clearance within six months after hire

Qualification

Risk Management Framework (RMF)Cybersecurity verificationSecurity Control Traceability MatricesNIST SP 800-53LinuxWindows securitySecure Technical Implementation Guides (STIGs)Cloud-native solutionsAgile methodologySystems engineering conceptsMicrosoft Office proficiencyCommunication skillsCreative thinking

Required

Requires a Bachelor's degree in Engineering, or a related Science, Technology or Mathematics field

Also requires 2+ years of job-related experience, or a Master's degree and 6 months of job-related experience

Ability to obtain a Department of Defense TS/SCI security clearance is required at time of hire

U.S. citizenship is required

Supports the development of RMF body of evidence for security requirements, including security plans, security testing plans, Security Control Traceability Matrices, and System Impact Analyses

Performs routine security verification tasks using manual and automated methods (Cyber Test Procedures and vulnerability scans)

Supports the execution of Assessment and Authorization events

Collaborates with Development and Test teams to plan, implement, and support the verification of security requirements

Actively participates in an Agile team to organize, prioritize, and status work efforts

Champions security perspective for decisions related to implementing and verifying security controls in high-security, cloud-native DevSecOps environments

Self-directed and self-starting ability

Strong written and verbal communication skills

Excellent ability to communicate issues, impacts, and corrective actions

Strong security mindset and comfortable questioning system behavior inconsistent with key security principles

Familiar with NIST SP 800-53 & Risk Management Framework (RMF)

Familiar with Linux and Windows operating systems and their security features

Experience with Secure Technical Implementation Guides (STIGs)

Understanding of the RMF Assessment and Authorization process

Experience with automation, virtualization, containerized application deployment and orchestration, and cloud-native solutions

Strong use and understanding of systems engineering concepts, principles, and theories

Contributes to the achievement of business objectives

Recognizes and incorporates various security designs and lessons learned

Able to sell concepts and ideas effectively

Able to work directly with customers

Proficient in reporting relevant cyber systems engineering design

Regular contact with senior levels of security workgroups

Ability to lead security workgroups

Works under limited direction

Frequent contact with project leaders, other professionals within the Engineering department, project teams, and external customers' security professionals

Creative thinker and good multi-tasker

Strong understanding of Microsoft Office applications

Must be able to obtain a TS/SCI Clearance within six months after hire

Benefits

Flexible work environment

Highly competitive benefits

Company

General Dynamics Mission Systems

Glassdoor3.9

General Dynamics Mission Systems designs and delivers critical systems and products for defense and cybersecurity customers. It is a sub-organization of General Dynamics.

Founded in 1952

Fairfax, Virginia, USA

10001+ employees