Advanced Information Assurance Engineer

Advanced Information Assurance EngineerAs a Cybersecurity / Endpoint Security Engineer, you will apply proficient cybersecurity and systems engineering knowledge to implement, administer, test, and maintain endpoint detection and response (EDR) and extended detection and response (XDR) systems while contributing to broader cybersecurity and Information Assurance activities. You will collaborate with systems, infrastructure, integration, test, and cybersecurity teams to analyze, implement, and verify security requirements within Department of Defense computing environments.Approximately 50-75% of this position will focus on EDR/XDR engineering activities, including installation and configuration of COTS security products, endpoint management systems, policy development, security testing, troubleshooting, upgrades, and maintenance. The remaining effort will include vulnerability and configuration scanning, analysis and reporting of findings, remediation tracking, collection of objective evidence, and development and coordination of cybersecurity documentation.This position requires the ability to plan and execute assigned security engineering tasks independently, exercise sound technical judgment, and coordinate resolution of system security concerns with multidisciplinary engineering teams.What you’ll experience:Implementing, configuring, testing, and administering EDR/XDR technologies across Windows and Linux environmentsDeveloping and implementing system security policies based on system and cybersecurity requirementsPlanning and executing security testing and evaluating the implementation of security requirementsAssessing vulnerability and configuration findings, recommending corrective actions, and verifying remediationDeveloping and maintaining security documentation and supporting technical evidenceContributing to security requirements analysis, system security design, and Assessment and Authorization (A&A) activitiesCollaborating with project leaders and multidisciplinary engineering teams to complete system security activitiesWhat you bring to the table:Proficient understanding and application of systems engineering and cybersecurity concepts, principles, and practicesWorking knowledge of Windows and/or Linux operating systems, containerized workloads, and fundamental system administration practicesPractical experience installing, configuring, maintaining, and troubleshooting COTS softwareFamiliarity with cybersecurity specifications and guidance, including Risk Management Framework (RMF), DISA STIGs, and other government security requirements, and the ability to apply applicable guidance to assigned tasksProficient understanding of security testing, verification, and validation processesAbility to independently investigate software, service, configuration, and connectivity issues and verify corrective actionsAbility to assess technical and cybersecurity findings, recognize system security risks, and clearly communicate concerns and recommended actionsProficient written and verbal communication skillsProficiency in Microsoft Office applicationsAbility to plan and execute assigned project tasks, coordinate technical activities, and communicate status, risks, and dependenciesResponsibilities may include:Install, configure, maintain, test, and troubleshoot EDR/XDR products and associated endpoint componentsAdminister EDR/XDR products and associated technologiesDevelop, configure, test, deploy, and maintain system security policiesValidate configuration and policy changes in representative lab or test environments with applicable security policies and controls enforcedMonitor and assess endpoint health, agent communications, security events, content currency, and policy application across supported systemsIndependently investigate agent communication, policy enforcement, and application compatibility issues; identify contributing security controls and verify corrective actions through testingEvaluate interactions between application, platform, and site security policies, including policy inheritance and required exceptionsContribute to system security design, security requirements analysis, and allocation of applicable requirements to system componentsPlan and execute security testing and evaluate the implementation of applicable security requirementsExecute and review vulnerability and security configuration scans; analyze, document, and track findings through remediation or dispositionImplement and assess applicable DISA STIG requirements and document resultsDevelop and maintain installation procedures, Policy Layout Guides (PLGs), policy assignments, configuration-controlled packages, security documentation, and supporting technical evidenceCollect and maintain cybersecurity Objective Quality Evidence (OQE), prepare assigned cybersecurity compliance and A&A documentation, and coordinate documentation review and routingAssess system security threats and risks and recommend mitigation measures throughout the program life cycleSelect appropriate standards, processes, procedures, and tools for assigned security engineering activitiesCoordinate with engineering and cybersecurity teams to investigate findings, recommend corrective actions, and verify remediationWhat sets you apart:Hands-on experience administering and troubleshooting Trellix ePolicy Orchestrator (ePO), Trellix Agent, Endpoint Security (ENS), HBSS, Microsoft Defender for Endpoint, CrowdStrike Falcon, and/or other EDR/XDR productsExperience with Istio, Cilium, Calico, and/or other technologies supporting container networking and securityExperience independently developing, modifying, implementing, and testing endpoint security policiesExperience executing assessments and analyzing findings using ACAS/Tenable Nessus, Evaluate-STIG, DISA STIGs, SCAP Compliance Checker (SCC), Trivy, or similar cybersecurity assessment toolsExperience contributing to DoD RMF and Assessment and Authorization (A&A) activitiesExperience administering and securing Windows Server, containers, and/or Red Hat Enterprise Linux (RHEL)Working knowledge of Active Directory, Group Policy, certificates, firewalls, and/or enterprise networkingExperience applying PowerShell, Bash, Python, Ansible, or other scripting and automation technologies to improve engineering efficiency and repeatabilityExperience with Navy CANES or ESS environments, PLG development, configuration management, or deployed system validationDemonstrated ability to improve security implementation, testing, documentation, or operational management practicesSalary Note: This estimate represents the typical salary range for this position based on experience and other factors (geographic location, etc.). Actual pay may vary. This job posting will remain open until the position is filled. Combined Salary Range USD $112,924.00 - USD $125,275.00 /Yr.Company Overview: General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team!Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans