Senior Information Assurance Engineer

General Dynamics

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Scottsdale, AZ
Salary: $142,696–$158,303 / yr
Posted: 59 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $171k

This role $150k

$122k $219k

below market most similar roles pay here above market

This role pays less than 70% of similar roles. Most pay $145,725–$196,637 — the blue band above. At the midpoint, this role pays about $150k versus about $171k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Senior Information Assurance Engineer

Role Posting Log in to save

The Senior Information Assurance Engineer joins the GD Mission Systems team to lead cybersecurity engineering activities across the entire system life cycle. This role involves defining secure system architectures using defense-in-depth principles, performing requirements decomposition, and managing the Risk Management Framework (RMF) consistent with NIST SP 800-37. You will develop artifacts like System Security Plans, Security Control Traceability Matrices, and data-flow diagrams while mapping DISA STIGs and NCDSMO requirements. Key responsibilities include conducting technical analyses of networks and interfaces, supporting system accreditation, and collaborating in Agile environments to integrate security into CI/CD pipelines. The role addresses complex cybersecurity and systems engineering challenges within mission-critical products, specifically supporting space, satellite communications, and ground operations to ensure secure information sharing and robust defense against cyber threats.

Skills

RMF NIST SP 800-37 DISA STIGs Defense-in-Depth DevSecOps CI/CD SSDLC Cybersecurity Architecture Security Engineering System Security Plans (SSP Vulnerability Remediation Cross-Domain Solutions (CDS) Multi-Level Security (MLS) Agile Security Scanning

What you'll do

Define and implement secure system architectures using defense-in-depth principles.
Lead cybersecurity engineering activities across the system life cycle from requirements to accreditation.
Serve as the technical authority for security architecture, data flows, and control implementation during design reviews.
Develop and maintain artifacts including System Security Plans, architecture diagrams, and security requirements specifications.
Produce Security Control Traceability Matrices to track requirements through implementation and assessment.
Lead Risk Management Framework (RMF) activities including system categorization, control tailoring, and POA&M management.
Map and assess DISA STIGs and other government security baselines within the system architecture.
Perform technical analyses of networks and systems to verify compliance with government security specifications.

What we're looking for

U.S. citizenship is required.
Department of Defense Secret security clearance is required at time of hire.
Bachelor's degree in Engineering or a related Science/Mathematics field plus 8 years of relevant experience is required.
Master's degree plus 6 years of relevant experience is required.
Strong understanding of cybersecurity systems engineering, secure architecture, RMF, and defense-in-depth principles is required.
Working knowledge of NIST RMF and associated guidance, including NIST SP 800-37, is required.
Active cybersecurity certification such as ISC2 CISSP, CompTIA Security+, CEH, or equivalent (preferred).
Experience with Secure Software Factory, SSDLC, DevSecOps, and CI/CD pipelines (preferred).

Save