Information Assurance Engineer

USA-AZ-Scottsdale

Full-time

Hybrid

Entry, Mid Level

General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. The Information Assurance Engineer will be responsible for conducting vulnerability assessments, managing security compliance, and collaborating with teams to enhance system security.

Apply Now

Responsibilities

Perform regular vulnerability scans using ACAS to identify security weaknesses and vulnerabilities within the system.
Analyze scan results and provide detailed reports on findings, including risk assessments and recommended mitigations.
Implement and manage system security patching processes to ensure timely updates and compliance with security policies.
Collaborate with cross-functional teams to address vulnerabilities and ensure the security of all systems.
Develop and maintain documentation related to security compliance, vulnerability management, and patch management processes.
Stay current with the latest cybersecurity trends, threats, and technologies to proactively protect the organization's assets.
Ensure compliance with relevant regulatory requirements and industry standards (e.g., NIST, RMF, STIG, etc.).
Conduct security audits and assessments to verify compliance with established security policies and procedures.
Reviews results of vulnerability assessments and code reviews and informs management of vulnerabilities, risk and mitigation.

Qualification

Required

Requires a Bachelor’s degree in Engineering, or a related Science or Mathematics field.
Requires 2+ years of job-related experience or a Master's degree.
Ability to obtain a Department of Defense Secret security clearance is required at time of hire.
U.S. citizenship is required.
Solid application of systems engineering concepts, principles, and theories.
Solid understanding of verification and validation process.
Skilled in communicating issues, impacts, and corrective actions to leadership.
Demonstrated ability to clearly recognize and report relevant system security concerns and issues.
Ability to participate in and contribute to multiple work groups.
Perform regular vulnerability scans using ACAS to identify security weaknesses and vulnerabilities within the system.
Analyze scan results and provide detailed reports on findings, including risk assessments and recommended mitigations.
Implement and manage system security patching processes to ensure timely updates and compliance with security policies.
Collaborate with cross-functional teams to address vulnerabilities and ensure the security of all systems.
Develop and maintain documentation related to security compliance, vulnerability management, and patch management processes.
Stay current with the latest cybersecurity trends, threats, and technologies to proactively protect the organization's assets.
Ensure compliance with relevant regulatory requirements and industry standards (e.g., NIST, RMF, STIG, etc.).
Conduct security audits and assessments to verify compliance with established security policies and procedures.
Reviews results of vulnerability assessments and code reviews and informs management of vulnerabilities, risk and mitigation.
Proven ability to leverage technical expertise in the following: Nessus (ACAS) Vulnerability Assessment, installation, and management.
Proven ability to leverage technical expertise in the following: Security Technical Implementation Guide (STIGs) to identify, analyze, and remediate security threats.
Proven ability to leverage technical expertise in the following: Network and Systems Administration.
Proven ability to leverage technical expertise in the following: Implementing secure configurations based on NIST (800-53, 800-171) with Continuous Monitoring (CONMON) principles.
Must be able to obtain a Secret Clearance.