G

General Dynamics Mission Systems

Builds secure electronics for defense missions

Senior Principal Information Assurance Engineer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeAnnapolis Junction, MD, USA

About the Job

Requirements

  • A bachelor's degree in Computer Science, a related field, or an equivalent combination of education and relevant work experience, plus at least 10 years of relevant experience; alternatively, a master's degree plus at least 8 years of relevant experience.
  • A Department of Defense Top Secret/SCI security clearance is required at time of hire, and U.S. citizenship is required.
  • Advanced experience in systems security engineering, Information Assurance, cybersecurity engineering, Risk Management Framework, Assessment and Authorization/Certification and Accreditation, or related disciplines.
  • Strong knowledge of government cybersecurity requirements, including Risk Management Framework, DIACAP, DISA Security Technical Implementation Guides, and related security standards.
  • Experience developing and maintaining authorization documentation; supporting Authorization to Operate/Interim Authorization to Test planning and compliance; conducting security assessments; and managing vulnerability remediation and continuous monitoring.
  • Experience with configuration management and Configuration Control Board processes, systems engineering, verification and validation, and lifecycle risk management.
  • Ability to lead complex security efforts, assess technical tradeoffs, coordinate stakeholders, manage risk, and clearly communicate recommendations.
  • Familiarity with program performance measures, including Schedule Performance Index/Cost Performance Index, Earned Value Management, Cost Account Management, and Statistical Process Controls.

Responsibilities

  • Lead security architecture, security requirements analysis, and requirements flow down across complex systems, ensuring cybersecurity is incorporated throughout design, implementation, integration, and sustainment activities.
  • Lead Risk Management Framework, Assessment and Authorization/Certification and Accreditation, Authorization to Operate, and Interim Authorization to Test efforts, including maintaining System Security Plans, Configuration Management Plans, contingency plans, risk assessments, control implementation statements, Plans of Action and Milestones, and other authorization artifacts.
  • Plan and execute security testing, assessments, vulnerability scanning, control verification, remediation planning, and continuous-monitoring activities; assess risks and recommend balanced, practical solutions.
  • Track and report Authorization to Operate/Interim Authorization to Test status, compliance posture, vulnerabilities, risks, and remediation progress for assigned systems and associated environments.
  • Support Configuration Control Board administration by documenting, evaluating, prioritizing, tracking, and communicating hardware, software, operational, and configuration changes.
  • Lead security planning, cost and schedule estimating, risk analysis, technical task execution, and cross-functional coordination with engineering, test, software, infrastructure, program management, customers, and cybersecurity stakeholders.
  • Develop and brief security documentation, technical findings, risks, and recommendations; mentor Information Assurance personnel; and identify artificial intelligence, automation, or analytics opportunities to improve security operations.
  • Travel up to 30% based on business needs.

Desired Qualifications

  • Cybersecurity certification such as CISSP, CASP+, CISM, Security+, or equivalent.
  • Experience as an Information Systems Security Engineer, Information Systems Security Manager, Information Systems Security Officer, security-control assessor, or senior cybersecurity lead supporting Department of Defense, Intelligence Community, classified, or similarly regulated environments.
  • Experience with security dashboards, Plans of Action and Milestones management, compliance reporting, continuous monitoring, and vulnerability-management tools.
  • Experience integrating cybersecurity into software, hardware, network, virtualization, cloud, or cross-domain solutions.
  • Experience applying automation, scripting, artificial intelligence, or analytics to improve security documentation, vulnerability analysis, compliance tracking, or risk management.

About the Company

General Dynamics Mission Systems

Builds secure electronics for defense missions

General Dynamics Mission Systems builds defense electronics and integrated systems for military, intelligence and civil government customers. Its equipment connects people and platforms across land, sea, air, space and cyber missions, from tactical radios to satellite ground infrastructure. The business designs submarine weapon controls, aircraft processing equipment and encryption products that protect classified voice, video and data. Government contracts fund development and production, and its products become components of larger military platforms and integrated national security systems. A business unit of General Dynamics, it is headquartered in Chantilly, Virginia.

Company size
10,001+
Company stage
Not listed
Total funding
Not listed
Headquarters
Chantilly, VA
Founded
1952

Recently Posted Jobs

Explore more opportunities at General Dynamics Mission Systems

See more jobs