G

General Dynamics Information Technology

Builds and runs technology for government agencies

Information Security Analyst Senior Principal

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeJoint Base Andrews, MD, USA$142.8k - $161k

About the Job

Requirements

  • At least 10 years of experience is required; 8 or more years is preferred.
  • Must possess and maintain a Top Secret/SCI clearance.
  • A Bachelor of Arts or Bachelor of Science degree is required, although additional years of experience may substitute.
  • Comprehensive knowledge of data security administration principles, methods, and techniques is required.
  • Must meet Department of Defense 8570.01M requirements for IAT Level II, such as CASP CE.
  • Understanding of Department of Defense Risk Management Framework requirements, including 800-53 Revision 4 and Revision 5, is required.
  • Understanding of Department of Defense policies and procedures, including FIPS 199, FIPS 200, NIST 800-53, and other applicable policies, is required.

Responsibilities

  • Perform cybersecurity activities for a large program and coordinate with government program staff, the United States Air Force, and other government agencies to assist in creating, disseminating, directing, and auditing program policy, standards, and operating procedures.
  • Use available resources to conduct cybersecurity activities and report the overall program security posture to senior GDIT and government personnel.
  • Conduct network and system vulnerability audits using Security Technical Implementation Guides, DISA SCAP, the ACAS vulnerability scanner, and ESS Policy Auditor; mitigate findings for Linux, Windows, Cisco, Juniper, VMware, and other associated operating systems.
  • Create, track, and review Plans of Action and Milestones and identify solutions to assist with problem remediation and resolution.
  • Communicate tactical and strategic threat information to government leaders, Cybersecurity Operations, and Assessment and Authorization staff to support cyber-risk decisions and threat mitigation.
  • Carry out the Department of Defense Risk Management Framework in accordance with Department of Defense 8510 to assess information-system security posture through security-control validation activities and coordination of security testing.
  • Maintain security accreditation status, including system documentation for multiple Department of Defense classified networks and interconnected systems.
  • Coordinate with AFRL, the United States Air Force, and other organizations in support of audits and inspections, and provide required documentation for SAVs, ST&Es, and CCRI.
  • Evaluate firewall change requests and assess organizational risk.
  • Provide guidance on vulnerability countermeasures or mitigation of non-compliant controls.
  • Protect the integrity of networks, systems, and applications by technically enforcing organizational security policies and monitoring vulnerability-scanning devices.
  • Perform periodic and on-demand system audits and vulnerability assessments, including reviews of user accounts, application access, and file systems, to determine compliance.
  • Provide guidance and work leadership to less-experienced technical staff members.
  • Maintain current knowledge of relevant technology as assigned.
  • Participate in special projects as required.

Desired Qualifications

  • Depending on the job assignment, additional specific certifications may be required.
  • The work is typically performed in an office environment with normal safety precautions and may require some physical effort handling light materials, boxes, or equipment.

About the Company

General Dynamics Information Technology

Builds and runs technology for government agencies

GDIT builds and runs technology systems for U.S. government agencies, including defense, intelligence and civilian organizations. Its work spans cloud infrastructure, cybersecurity and software development, with tools tailored to sensitive missions and large agency operations. The company combines its own reusable technology solutions with commercial products, then earns revenue through contracts to design, integrate, modernize and operate customer systems, including support for both classified and unclassified networks. It also supplies technical expertise and daily operational support, and is a business unit of General Dynamics headquartered in Falls Church, Virginia.

Company size
10,001+
Company stage
Not listed
Total funding
Not listed
Headquarters
Falls Church, VA
Founded
1999

Recently Posted Jobs

Explore more opportunities at General Dynamics Information Technology

See more jobs