Cybersecurity Software Engineer

General Dynamics

Confirmed live yesterday High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Scottsdale, AZ
Salary: $112,924–$125,275 / yr
Posted: 22 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $156k

This role $119k

$102k most similar roles pay here $212k

This role pays less than 81% of similar roles. Most pay $126,750–$185,300 — the shaded band above. At the midpoint, this role pays about $119k versus about $156k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1123 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 984 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Cybersecurity Software Engineer

Role Posting Log in to save

As a Cybersecurity Software Engineer, you will join the engineering team to own the development and execution of the program vulnerability management process while integrating AI into every stage. You will perform static and dynamic code analysis, manage software dependencies, generate SBOMs for supply chain risk management, and implement hardening measures to meet government standards. Your daily work involves building security tools through scripting, containers, and CI/CD pipelines, as well as producing artifacts for system accreditation. You will utilize a technical stack including C/C++, Java, Python, or Rust within Linux environments. Key tools include ACAS, Anchore Grype, SonarQube, Fortify, OpenSCAP, Syft, and Podman. You will apply expertise in NIST SP 800-53, STIGs, OWASP, and RMF to address security weaknesses and ensure compliance across the software development lifecycle.

Skills

SAST DAST SCA SBOM CI/CD DevSecOps Python C++ Java Rust Docker Kubernetes Podman Ansible GitLab ACAS AnchoreGrype Syft SonarQube Fortify OpenSCAP NIST RMF OWASP STIGs

What you'll do

Manage the program vulnerability management process while integrating AI into each step of the workflow.
Execute and analyze scan results using tools such as DISA ACAS and Anchore Grype.
Conduct static and dynamic code analysis to detect security weaknesses and inform remediation efforts.
Perform software dependency management and maintain Software Bills of Materials (SBOM) for supply chain risk tracking.
Implement configuration and hardening measures to ensure systems comply with government, industry, and vendor guidance.
Produce and deliver security artifacts and Plan of Action and Milestones (POAM) to support system accreditation.
Build and maintain security tools through scripting, containers, and CI/CD pipeline automation.
Monitor emerging threats and CVEs to update the program's security posture and best practices.

What we're looking for

U.S. citizenship is required.
Ability to obtain a Department of Defense Secret security clearance is required.
Bachelor's degree in Software Engineering or a related STEM field, plus 5 years of experience; or a Master's degree, plus 3 years of experience.
Proficiency in one or more languages such as C/C++, Java, Python, or Rust.
Proficiency in DISA STIGs and security frameworks including NIST, RMF, OWASP, CWE, CVE, OVAL, and CVSS.
Proficiency with security testing tools (SAST, DAST, SCA) and vulnerability management tools like SonarQube, Fortify, OpenSCAP, Syft, Grype, and ACAS.
Experience in Linux environments, Gitlab, CI/CD pipelines, and container technologies such as Podman, Docker, or Kubernetes.
ISC CISP certification (preferred); experience with Ansible, Cross Domain Solutions, or DevSecOps (preferred).