Cybersecurity Systems Engineer/Information Systems Security Engineer (ISSE)

General Dynamics Information Technology is hiring a cybersecurity systems and information systems security subject-matter expert to support accreditation and authorization work for assigned systems. In this onsite Washington, DC role, you will lead and assist A&A efforts and maintain RMF documentation required to progress toward Authority to Develop (A TD), Interim Authority to Test (IA TT), and Authority to Operate (ATO). The position supports compliance oversight and audit liaison activities while coordinating across systems owners, project teams, and customer security organizations.

Location: Washington, DC (onsite)

Salary: USD 164,382 - 207,000 per year

Experience: 10+ years

Clearance: Top Secret SCI + Polygraph (TS/SCI with ability to obtain and maintain a Polygraph)

Key Responsibilities

• Lead Accreditation and Authorization (A&A) reviews by Group level ISSMs and Security Controls Assessors (SCA).
• Document security control implementations and compile artifacts that support the Risk Management Framework (RMF) and ICD 503 security accreditation for A&A efforts.
• Build understanding of each project’s architecture in order to write or update Systems Security Plans (SSP) and CONOPS.
• Coordinate with systems owners, project managers, and engineering teams to produce A&A documentation including Contingency Plan (CP), General User Guide (GUG), Privileged User Guide (PUG), and Standard Operating Procedures (SOP) artifacts.
• Document Plans of Actions and Milestones (POA&Ms) responses or mitigations and ensure required evidence is gathered from systems owners, PMs, and engineering teams.
• Coordinate with contractor and customer personnel to collect A&A content and work through the customer A&A process to achieve A TD, IA TT, and ATO for primary and secondary assigned systems.
• Monitor each A&A project within the customer’s A&A process and discuss status across levels.
• Support audit liaison and compliance oversight activities to strengthen the security program and promote RMF compliance.
• Perform technical content reviews and edits for document updates as part of the Annual ISCM and OA Strategy Plan Update.
• Conduct technical review and update of the plan’s control volatility section based on emerging threats, changes to agency security posture, latest IC guidance, agency policy, federal laws, standards, and guidance, informed by information profile (for example, HVA and classification context).
• Provide audit liaison support for internal and external audits and external reporting data calls, including concise, actionable recommendations and process improvement reports.

Required Qualifications

• Education/Training: Technical training, certification(s), or degree plus 10 years.
• DoD 8570.01-M: Meets IASAE Level II requirements (Information Assurance System Architects & Engineer role).
• Clearance: TS/SCI with ability to obtain and maintain a Polygraph.
• Citizenship: U.S. citizenship required.
• Worksite: Location is on customer site.

Technologies / Frameworks

• Risk Management Framework (RMF)
• ICD 503
• Annual ISCM
• OA Strategy Plan Update

Category: Cyber and IT Risk Management
Requisition: RQ229070
Requisition type: Regular
Travel required: None
Public trust: None