Advanced Information Assurance Engineer with Security Clearance

Basic Qualifications Bachelor's degree in Engineering, or a related Science or Mathematics field, plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience.

CLEARANCE REQUIREMENTS: Department of Defense Secret security clearance is required at time of hire. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.

Responsibilities for this Position As a Cybersecurity / Endpoint Security Engineer, you will apply proficient cybersecurity and systems engineering knowledge to implement, administer, test, and maintain endpoint detection and response (EDR) and extended detection and response (XDR) systems while contributing to broader cybersecurity and Information Assurance activities. You will collaborate with systems, infrastructure, integration, test, and cybersecurity teams to analyze, implement, and verify security requirements within Department of Defense computing environments.

Approximately 50-75% of this position will focus on EDR/XDR engineering activities, including installation and configuration of COTS security products, endpoint management systems, policy development, security testing, troubleshooting, upgrades, and maintenance. The remaining effort will include vulnerability and configuration scanning, analysis and reporting of findings, remediation tracking, collection of objective evidence, and development and coordination of cybersecurity documentation.

This position requires the ability to plan and execute assigned security engineering tasks independently, exercise sound technical judgment, and coordinate resolution of system security concerns with multidisciplinary engineering teams. What you'll experience:

• Implementing, configuring, testing, and administering EDR/XDR technologies across Windows and Linux environments
• Developing and implementing system security policies based on system and cybersecurity requirements
• Planning and executing security testing and evaluating the implementation of security requirements
• Assessing vulnerability and configuration findings, recommending corrective actions, and verifying remediation
• Developing and maintaining security documentation and supporting technical evidence
• Contributing to security requirements analysis, system security design, and Assessment and Authorization (A&A) activities
• Collaborating with project leaders and multidisciplinary engineering teams to complete system security activities

What you bring to the table:

• Proficient understanding and application of systems engineering and cybersecurity concepts, principles, and practices
• Working knowledge of Windows and/or Linux operating systems, containerized workloads, and fundamental system administration practices
• Practical experience installing, configuring, maintaining, and troubleshooting COTS software
• Familiarity with cybersecurity specifications and guidance, including Risk Management Framework (RMF), DISA STIGs, and other government security requirements, and the ability to apply applicable guidance to assigned tasks
• Proficient understanding of security testing, verification, and validation processes
• Ability to independently investigate software, service, configuration, and connectivity issues and verify corrective actions
• Ability to assess technical and cybersecurity findings, recognize system security risks, and clearly communicate concerns and recommended actions
• Proficient written and verbal communication skills
• Proficiency in Microsoft Office applications
• Ability to plan and execute assigned project tasks, coordinate technical activities, and communicate status, risks, and dependencies

Responsibilities may include:

• Install, configure, maintain, test, and troubleshoot EDR/XDR products and associated endpoint components
• Administer EDR/XDR products and associated technologies
• Develop, configure, test, deploy, and maintain system security policies
• Validate configuration and policy changes in representative lab or test environments with applicable security policies and controls enforced
• Monitor and assess endpoint health, agent communications, security events, content currency, and policy application across supported systems
• Independently investigate agent communication, policy enforcement, and application compatibility issues; identify contributing security controls and verify corrective actions through testing
• Evaluate interactions between application, platform, and site security policies, including policy inheritance and required exceptions
• Contribute to system security design, security requirements analysis, and allocation of applicable requirements to system components
• Plan and execute security testing and evaluate the implementation of applicable security requirements
• Execute and review vulnerability and security configuration scans; analyze, document, and track findings through remediation or disposition
• Implement and assess applicable DISA STIG requirements and document results
• Develop and maintain installation procedures, Policy Layout Guides (PLGs), policy assignments, configuration-controlled packages, security documentation, and supporting technical evidence
• Collect and maintain cybersecurity Objective Quality Evidence (OQE), prepare assigned cybersecurity compliance and A&A documentation, and coordinate documentation review and routing
• Assess system security threats and risks and recommend mitigation measures throughout the program life cycle
• Select appropriate standards, processes, procedures, and tools for assigned security engineering activities
• Coordinate with engineering and cybersecurity teams to investigate findings, recommend corrective actions, and verify remediation

What sets you apart:

• Hands-on experience administering and troubleshooting Trellix ePolicy Orchestrator (ePO), Trellix Agent, Endpoint Security (ENS), HBSS, Microsoft Defender for Endpoint, CrowdStrike Falcon, and/or other EDR/XDR products
• Experience with Istio, Cilium, Calico, and/or other technologies supporting container networking and security
• Experience independently developing, modifying, implementing, and testing endpoint security policies
• Experience executing assessments and analyzing findings using ACAS/Tenable Nessus, Evaluate-STIG, DISA STIGs, SCAP Compliance Checker (SCC), Trivy, or similar cybersecurity assessment tools
• Experience contributing to DoD RMF and Assessment and Authorization (A&A) activities
• Experience administering and securing Windows Server, containers, and/or Red Hat Enterprise Linux (RHEL)
• Working knowledge of Active Directory, Group Policy, certificates, firewalls, and/or enterprise networking
• Experience applying PowerShell, Bash, Python, Ansible, or other scripting and automation technologies to improve engineering efficiency and repeatability
• Experience with Navy CANES or ESS environments, PLG development, configuration management, or deployed system validation
• Demonstrated ability to improve security implementation, testing, documentation, or operational management practices Our Commitment to You:
• An exciting career path with opportunities for continuous learning and development.
• Research oriented work, alongside award winning teams developing practical solutions for our nation's security
• Flexible schedules with every other Friday off work, if desired (9/80 schedule)
• Competitive benefits, including 401k matching, flex time off, paid parental leave, healthcare benefits, health & wellness programs, employee resource and social groups, and more
• See more at gdmissionsystems.com/careers/why-work-for-us/benefits Workplace Options: This position is fully on-site While on-site, you will be a part of the Progeny Manassas, VA Team #CJ2 Target salary range: USD $124,216.00/Yr.
• USD $137,803.00/Yr.

This estimate represents the typical salary range for this position based on experience and other factors (geographic location, etc.). Actual pay may vary. This job posting will remain open until the position is filled. Company Overview General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation.

With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team!

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans