Information Assurance Engineer

General Dynamics

Confirmed live yesterday High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Scottsdale, AZ
Salary: $112,924–$125,275 / yr
Posted: 72 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $160k

This role $119k

$103k most similar roles pay here $208k

This role pays less than 90% of similar roles. Most pay $136,500–$183,912 — the shaded band above. At the midpoint, this role pays about $119k versus about $160k for comparable roles.

Based on 239 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1123 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 984 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Information Assurance Engineer

Role Posting Log in to save

The Information Assurance Engineer joins the team to implement secure system architectures and designs while championing security perspectives for technical decisions. This role involves producing and maintaining Cybersecurity design documentation, Security Control Traceability Matrices, and inheritable control sets for test traceability. The engineer leads Risk Management Framework efforts using NIST 800-37 RMF to build evidence for security requirements and collaborates with development teams in an agile environment to plan and verify security features like authentication and access control. Key technical competencies include Defense in Depth, Secure DevSecOps, and multi-level security domain expertise. The role requires proficiency in mapping STIGs, NCDSMO, and DISA requirements while performing detailed technical analyses for subsystems. The work focuses on ensuring systems meet government security specifications within the context of ground to satellite communications and secure software factories.

Skills

Risk Management Framework NIST 800-37 DevSecOps STIGs Defense in Depth Agile Cybersecurity System Engineering Security Control Traceability Matrix Secure Software Factory Information Assurance System Architecture Access Control Authentication Audit Ground to Satellite Communication

What you'll do

Implement secure system architecture and designs in collaboration with development and deployment teams.
Champion the security perspective for decisions regarding the implementation and verification of security controls.
Produce and maintain cybersecurity design documentation and Security Control Traceability Matrices (SCTM).
Lead Risk Management Framework (RMF) efforts to produce evidence for security requirements using engineering expertise.
Coordinate with development and test teams to plan, implement, and support the verification of security requirements.
Map evidence from various security sources like STIGs and DISA into the traceability matrix.
Perform technical analyses to ensure system designs meet government security specifications and accreditation standards.
Conduct requirements analysis and manage functional requirements for subsystems and components.

What we're looking for

Bachelor's degree in Engineering or a related Science/Math field with 5 years of experience, or a Master's degree with 3 years of experience.
Must possess a Department of Defense Secret security clearance at the time of hire.
U.S. citizenship is required.
Experience in Cybersecurity System Engineering, Risk Management Framework (NIST 800-37), and Defense in Depth (preferred).
Active cybersecurity certifications such as CISSP, Security+, or CEH (preferred).
Knowledge of Ground to Satellite communication and ground operations (preferred).
Experience with Secure Software Factory, Secure DevSecOps, and multi-level security domains (preferred).
Experience with agile program management and requirements analysis (preferred).

Save