Information Assurance Security Engineer

Transform technology into opportunity as an Information Assurance Security Engineer with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you'll be at the forefront of innovation and play a meaningful part in improving how agencies operate.

At GDIT, people are our differentiator. As an Information Assurance Security Engineer, you will help ensure today is safe and tomorrow is smarter. Our work depends on a TS/SCI cleared Information Security Engineer joining our team to support our intelligence customer in Springfield, VA or Arnold, MO.

General Dynamics Information Systems (GDIT) is seeking a Security Engineer to provide expert technical services on all aspects of Information Security. Responsibilities include writing information security policy drafts, reviewing Memorandum of Agreements, and coordinating and managing all aspects of Certification and Accreditation. You will advise and assess system design/architecture, define, design and evaluate information security systems, and manage multi‑agency information sharing and integration security.

You will maintain affiliations with high‑level personnel at multiple agencies and organizations involved in Information Security, conduct incident response, system access approval, audit log review, and Configuration Control Board participation, and support daily consultations on a wide variety of security issues.

• Act as the representative of the Information System Security Manager ensuring compliance with IS security procedures.
• Support efforts to operate, maintain, and dispose of information system materials in accordance with security directives, policies and practices.
• Generate and implement requisite security training ensuring user security awareness of responsibilities prior to system access.
• Initiate protective and corrective measures when incidents or vulnerabilities are discovered.
• Ensure IA hardware and software complies with security configuration guides.
• Implement and enforce IA policies and procedures as defined by A&A documentation.
• Ensure users are aware of their IA responsibilities.
• Work on multiple projects/tasks simultaneously in a dynamic, fast‑paced, team‑oriented environment.
• Perform Operations & Sustainment functions for the NCE network security infrastructure (firewalls, web gateways, mail gateways, IDS, load balancers, performance monitoring tools, management systems, etc.).
• Perform maintenance and/or advanced configuration of equipment to protect the network from emerging cyber threats.
• Provide experience with Cloud Infrastructure/AWS‑based technology.
• Use security tools such as ACAS, HBSS, Carbon Black, Tanium, Red Seal, and EMET.
• Conduct forensic traffic/log analysis to isolate issues or respond to analyst alerts.
• Respond to escalated troubleshooting requests.
• Maintain and administer network infrastructure standards, documentation and fault tolerance.
• Present monitoring/test results and reports as required.
• Perform/support integration testing as required.
• Participate in special projects as required.
• Review Plan of Action and Milestones (POA&Ms) and conduct technical decomposition, remediation, and lien resolution.
• Execute remediation process to implement technical solutions to address vulnerability findings via ACAS security scan.
• Install, harden, deploy, document, and troubleshoot network perimeter security technologies.
• Have scripting ability on Unix and/or RHEL OS.
• Be experienced with complex Microsoft macros and Power Shell scripts.
• Have a basic understanding of Windows Enterprise AD architecture and VMWare virtualization.
• Be proficient in network routing/VLAN technology.

• Knowledge of and experience with ICD 503 and familiarity with Cloud Infrastructure/AWS‑based solutions.
• Possession of IAM II certification to start in accordance with DOD 8570.1M.
• Understanding of the RMF process and how systems security requirements will be met.
• Experience working with all IT groups to build IT systems with security planned from the start.
• Ability to identify the level of protection systems will need and determine the appropriate group or process to satisfy security requirements.
• CISSP certification or equivalent (CAP, GSLC, CISM).
• Experience in system administration.
• Experience in network engineering.
• Experience in system design and development.

Education:

Bachelor’s Degree in Computer Science or a related technical discipline, or the equivalent combination of education, professional training or work experience.

Qualifications:

10–15 years of related experience in data security administration.

Location:

Customer Site.

US Citizenship Required.