Job: IT Security Engineer Sr Staff

The IT security application engineer is responsible for ensuring that General Dynamics C4S designs, builds, implements, and maintains both COTS and in-house applications. The candidate will perform the following functions:

Work with application architects to set standards for secure application design, including the incorporation of security in to the SDLC;
Proactively check applications for security vulnerabilities;
Ensure the integration of security functions/tools (e.g., authentication/ authorization / audit / cryptography) into development environment to increase security of existing applications and to enable new functionality;
Collaborate with IT Infrastructure to integrate both business and office productivity applications in to security tools, such as SSO, SAML, PKI, etc.;
Participate in application design sessions to ensure that applications are designed to meet business security requirements;
Provide governance of SDLC security related procedures to ensure that security checkpoints are passed and that various processes (e.g., Chg Mgmt) are strong and are followed;
Keep up-to-date about the latest application security threats / vulnerabilities / risks as they pertain to the corporation' information assets and data
Assess vendor capabilites to meet C4S/Corporate security requirements and make appropriate business and technical recommendations to balance and mitigate risks.


The candidate must have a solid understanding of the following IT security concepts and functions: AAA (Authentication, authorization, audit), cryptography, application design, design flaw remediation, architecture, and secure transaction design, and performing risk assessments.

The candidate must have excellent written & verbal communications skills and the ability to manage multiple projects while working under strict deadlines. As well as have the ability to work well independently and with others in a cohesive team.

Education: B.S. in Information assurance, Computer Science, Computer Engineering, or Computer Information Systems or equivalent experience.
Experience: At least 5 years of IT Security experience with 3 years of experience implementing and supporting application design, design flaw remediation, architecture, and secure transaction design, and performing risk assessments.
CSSLP, CISSP, SANS or other industry certifications are highly desirable
Strong application development background (.NET, Java,SQL)
Applicant must be capable of obtaining a US Security Clearance.
Applicant must be able to pass an extended background investigation (EBI) for this position.
Applicant must be a US Citizen.