Sr Analyst, Info Security
7 days left
- Full Time
General Dynamics is seeking professional and highly motived candidates for an Information Security Engineer position which supports Information Assurance (IA) related military and Federal support requirements. This position requires a high technical level of understanding along with the ability to guide and perform Certification and Accreditations (C&A) through enforcement of uniform standards, assessments, and certification criteria. Qualified candidates should possess knowledge and experienced in the following:
- Configure systems following Department of Defense (DoD) Certification and Accreditation (C&A) guidance and perform C&A assessments to evaluate compliance with established cyber security policies and regulations.Assist with conducting Security Testing & Evaluation (ST&E) for enclave and system accreditations and provide corrective actions to resolve or mitigate vulnerabilities that are identified.Be intimately familiar with to develop, modify, review and provide input for C&A packages for accreditation and re-accreditation Validate system compliance and ensure the systems meet the accreditation requirements as defined by Department of Defense Instruction (DoDI) 8510.01, DoD Information Assurance Certification and Accreditation Process (DIACAP).Have the ability to work independently on multiple accreditation packages for SSCPAC RDT&E systems.Provide engineering guidance based on DoD and industry Security Best Business Practices, security requirements and cyber security trends and solutions to include risk assessments and mitigations.Provide system engineering, integration, and life-cycle support for a variety of Navy Research and Development systems. Have the flexibility to understand and adapt to changing Cyber Security inspection criteriaEnsures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices.Experience with applying DISA Security Technical Implementation Guide or STIGs, and Security Recommendation Guides (SRG).Extensive experience with Assured Compliance Assessment Solution (ACAS) Detailed Vulnerability List Reports, with the ability to interpret and mitigate system vulnerabilities as required.