Cybersecurity Software Engineer

Cybersecurity Software EngineerResponsibilities for this PositionWhat You'll DoOwn the current development and execution of the program vulnerability management process across the entire program and integrating AI into each step of the wayExecute and analyze vulnerability scan results using DISA ACAS and Anchore GrypeConduct remediation efforts and verifying vulnerabilities are addressed in patched systemsConduct static and dynamic code analysis using industry standard tools to detect security weaknesses and inform remediation effortsPerform software dependency management, including tracking, updating, and assessing third-party components for known vulnerabilitiesGenerate and maintain software bills of materials (SBOM) for supporting supply chain risk management and vulnerability trackingRecommend and implement configuration and hardening remediation for systems and applications to comply with US Govt, Industry, or Vendor guidanceProduce and maintain the program's Plan of Action and Milestones (POAM) to include vulnerabilities and compliance findingsProduce & deliver security artifacts (Body of Evidence) that directly support the assessment of systems and applications being accreditedBuild and maintain security tools through scripting, containers, CI/CD pipelines, and other automationProduce and deliver security artifacts of findings with concise description of the issue, supporting evidence, reference material, and recommended mitigationsMonitor emerging threats, CVEs, and evolving security best practices and apply findings to supported technologies and program security postureDevelop and execute of security test plans, automated security tests, and verification and validation activitiesDevelop technical skills and cybersecurity expertise through on-the-job experience, mentorship, and cross-training with senior engineersSkills You'll BringProficiency in one or more languages such as C/C++, Java, Python, or Rust.Practical experience working in Linux environments (preferably Pi tBull), including command-line proficiency and familiarity with OS-level security controlsProficiency with security testing and vulnerability management tooling including SAST, DAST, SCA, and container scanning, with hands-on experience using tools such as SonarQube, Fortify, OpenSCAP, Syft, Grype, ACASProficiency of secure software development lifecycle (SSDLC) principles, practices, and common application-security vulnerabilitiesExperience utilizing security frameworks and standards such as NIST, RMF, OWASP, CWE, CVE, STIGs, OVAL, CVSS, or secure coding standardsExperience supporting system accreditation and authorization activities for RMF and NCDSMO assessmentsProficiency applying NIST SP 800-53 Security Controls, overlays, and tailoring guidance to support system security plans and authorization packagesExperience using agentic or generative AI tools to develop, analyze, or automate solutions for cybersecurity problemsExperience with containers such as Podman (preferred), Docker, KubernetesExperience with Gitlab and CI/CD pipelinesISC CISSP desired; willing to pursue certification over timePreferred QualificationsFamiliarity with Cross Domain Solutions, NCDSMO Raise the Bar, and other NCDSMO CDS guidanceExperience with Ansible test management framework.Experience with virtualization infrastructure and containers, ESXi preferredExperience in DevSecOps environments and securing CI/CD pipelineExperience using Anchore Syft and Anchor GrypeCurrent SIPR accessWorkplace Options: This position is Hybrid/Flex or fully on site as desired at the Scottsdale, AZ facility.Salary Note This estimate represents the typical salary range for this position based on experience and other factors (geographic location, etc.). Actual pay may vary. This job posting will remain open until the position is filled. Combined Salary Range USD $112,924.00 - USD $125,275.00 /Yr.Company OverviewGeneral Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team!Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans