G

General Dynamics Mission Systems

Builds secure electronics for defense missions

Information System Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeHuntsville, AL, USA$100.2k - $111.2k /yr

About the Job

Requirements

  • A Bachelor's degree in Engineering, or a related Science or Mathematics field, and at least 2 years of relevant experience; or a Master's degree and at least 6 months of relevant experience.
  • A Department of Defense Secret security clearance is required at hire, and U.S. citizenship is required.
  • Communicate technical cybersecurity topics clearly and effectively to diverse technical and non-technical audiences.
  • Help business and mission stakeholders understand the impact of cybersecurity, continuous monitoring, and risk decisions.
  • Partner with engineering, operations, and program teams to implement cybersecurity technologies, principles, and secure system practices.
  • Question system behavior, configurations, or operational activities that are inconsistent with security requirements and principles.
  • Use sound judgment, initiative, and attention to detail to identify, communicate, and drive corrective actions for cybersecurity risks.
  • Review, analyze, and communicate the significance of security logs, audit records, alerts, and vulnerability data.
  • Have working knowledge of continuous monitoring, vulnerability management, incident reporting and escalation, security control assessment, and remediation tracking.
  • Know the NIST Risk Management Framework, NIST SP 800-53 security controls, and Department of Defense cybersecurity authorization processes.
  • Manage recurring monitoring, evidence collection, and reporting responsibilities with limited supervision.
  • Execute complex technical and administrative cybersecurity tasks with limited supervision.
  • Communicate security issues, mission impacts, risk decisions, and corrective actions to technical teams, management, and customers.
  • Balance compliance, security risk, operational mission needs, and engineering constraints.

Responsibilities

  • Serve in an Information System Security Officer capacity, supporting the system’s cybersecurity posture throughout development, deployment, operations, and sustainment.
  • Perform continuous monitoring in accordance with the Risk Management Framework and program requirements, including reviewing security logs, audit records, alerts, vulnerability results, configuration changes, and security-relevant events.
  • Analyze security events and log data to identify anomalous activity, potential indicators of compromise, control deficiencies, and compliance concerns; coordinate escalation and response activities as appropriate.
  • Work with system development, deployment, and operations teams to implement and maintain secure system architectures, designs, configurations, and operational procedures.
  • Champion the cybersecurity perspective in decisions related to the implementation, assessment, operation, and verification of security controls.
  • Support the development, maintenance, and execution of continuous monitoring plans, including recurring security control assessments, evidence collection, status reporting, and risk tracking.
  • Produce and maintain cybersecurity design documentation, system security documentation, security operating procedures, and other artifacts supporting authorization and ongoing system security.
  • Produce and maintain the Security Control Traceability Matrix, inheritable control sets, and control implementation statements to support test traceability and audit readiness.
  • Lead or support NIST SP 800-37 Risk Management Framework activities to develop and maintain the body of evidence required for security authorization and ongoing authorization activities.
  • Coordinate with development, test, system administration, and operational teams to plan, implement, assess, and document security requirements and controls.
  • Track security findings, vulnerabilities, control deficiencies, and remediation activities; support development and maintenance of Plans of Action and Milestones.
  • Review and map evidence from applicable security requirement sources, including Security Technical Implementation Guides, National Cross Domain Strategy and Management Office guidance, Defense Information Systems Agency guidance, and customer requirements, within the Security Control Traceability Matrix and Risk Management Framework evidence package.
  • Support system accreditation and certification evaluation and test activities to ensure technical security features—including identification, authentication, access control, labeling, auditing, and accountability—are implemented and operating as intended.
  • Participate in Agile teams to organize, prioritize, execute, and provide status for cybersecurity and continuous-monitoring work efforts.
  • Contribute to incident-response preparedness and coordination by supporting log availability, audit configuration, event triage, reporting, and post-event corrective actions.
  • Plan and execute project tasks supporting the cybersecurity, Information System Security Officer, Risk Management Framework, and continuous-monitoring activities described above.

Desired Qualifications

  • Experience in cybersecurity system engineering, Information System Security Officer duties, Risk Management Framework, and defense in depth.
  • Experience with security operations, security information and event management tools, log review, audit analysis, vulnerability management, and continuous monitoring.
  • Experience supporting system authorization packages, annual or ongoing assessments, control validation, Plans of Action and Milestones management, and authorization-to-operate activities.
  • Active cybersecurity certifications such as ISC2 Certified Information Systems Security Professional, Security+, Certified Ethical Hacker, Certified Authorization Professional, Certified Information Security Manager, or similar credentials.
  • Ground-to-satellite communications knowledge and/or ground operations experience.
  • Experience performing requirements analysis, requirements definition, requirements management, functional analysis, performance analysis, system design, and technical trade studies under the leadership of a Lead Cybersecurity System Engineer.
  • Experience analyzing customer requirements, developing system security requirements, and defining allocations to lower-level elements and components.
  • Experience developing and evaluating systems, networks, and information systems to ensure designs meet applicable government security specifications.
  • Experience with Secure Software Factory and Secure DevSecOps practices.
  • Multi-level security domain expertise and cross-domain solution familiarity.
  • Ability to decompose security requirements quickly using an Agile, lightweight approach while avoiding unnecessary requirements bloat and clearly communicating and tracking impacts.
  • Experience supporting programs or organizations with relationships across partners such as Iridium, SDA, Northrop Grumman, York, and Lockheed Martin.
  • Agile program experience.
  • An active Department of Defense Secret clearance is required; Top Secret/Sensitive Compartmented Information clearance is preferred.

About the Company

General Dynamics Mission Systems

Builds secure electronics for defense missions

General Dynamics Mission Systems builds defense electronics and integrated systems for military, intelligence and civil government customers. Its equipment connects people and platforms across land, sea, air, space and cyber missions, from tactical radios to satellite ground infrastructure. The business designs submarine weapon controls, aircraft processing equipment and encryption products that protect classified voice, video and data. Government contracts fund development and production, and its products become components of larger military platforms and integrated national security systems. A business unit of General Dynamics, it is headquartered in Chantilly, Virginia.

Company size
10,001+
Company stage
Not listed
Total funding
Not listed
Headquarters
Chantilly, VA
Founded
1952

Recently Posted Jobs

Explore more opportunities at General Dynamics Mission Systems

See more jobs