G

General Dynamics Information Technology

Builds and runs technology for government agencies

Information Security Analyst Principal

Security Governance, Risk & CompliancePosted on Nov 13
Full-timePearl Harbor, Hawaii, USA$107.7k - $140.3k

About the Job

Requirements

  • At least 10 years of experience.
  • A BA/BS or an equivalent combination of education, technical training, or work/military experience.
  • An IAM Level II certification, such as CISSP, CASP, CISM, GSLC, or CCIS.
  • Must possess and maintain a Top Secret/SCI security clearance.
  • Familiarity with network concepts, user authentication, and digital signatures.
  • Understanding of DoW Risk Management Framework (RMF), including 800-53 Rev 4 and Rev 5.
  • Understanding of DoW policies and procedures, including FIPS 199, FIPS 200, NIST 800-53, and other applicable policies.
  • Additional specific certifications may be required depending on the job assignment.

Responsibilities

  • Perform cybersecurity activities for a large program and coordinate with government program staff, the USAF, and other government agencies to assist with creating, disseminating, directing, and auditing program policy, standards, and operating procedures.
  • Conduct cybersecurity activities using available resources and report the overall program security posture to senior GDIT and government personnel.
  • Conduct network and system vulnerability audits using Security Technical Implementation Guides (STIGs), the ACAS vulnerability scanner, and DISA SCAP, and mitigate findings for Linux, Windows, and associated network operating systems.
  • Create, track, and review Plans of Action and Milestones (POA&Ms), and identify solutions to assist with problem remediation and resolution.
  • Communicate tactical and strategic threat information to government leaders, Cybersecurity Operations, and Assessment and Authorization staff to support cyber risk decisions and threat mitigation.
  • Carry out the DoW Risk Management Framework in accordance with DoW 8510 to assess information systems' security posture through security control validation activities and coordinated security testing.
  • Maintain security authorization status, including system documentation for multiple DoW classified networks and interconnected systems.
  • Coordinate with OUSDI, USAF, DISA, USN, and other organizations in support of audits and inspections, and provide required documentation for SAVs, ST&Es, and CCRI.
  • Evaluate firewall change requests and assess organizational risk.
  • Perform Security Impact Analysis based on organizational requirements.
  • Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems.
  • Assist with implementing countermeasures or mitigating controls.
  • Protect the integrity of networks, systems, and applications by technically enforcing organizational security policies and monitoring vulnerability-scanning devices.
  • Perform periodic and on-demand system audits and vulnerability assessments, including reviews of user accounts and application access, and file-system and integrity scans to determine compliance.
  • Provide guidance and work leadership to less-experienced technical staff members.
  • Maintain current knowledge of relevant technology as assigned.
  • Participate in special projects as required.

Desired Qualifications

  • Lead and set priorities across multiple projects and tasks while operating in a dynamic, fast-paced, team-oriented environment.
  • Additional specific certifications may be required depending on the job assignment.
  • Perform work in an office environment and handle light materials, boxes, or equipment as needed.

About the Company

General Dynamics Information Technology

Builds and runs technology for government agencies

GDIT builds and runs technology systems for U.S. government agencies, including defense, intelligence and civilian organizations. Its work spans cloud infrastructure, cybersecurity and software development, with tools tailored to sensitive missions and large agency operations. The company combines its own reusable technology solutions with commercial products, then earns revenue through contracts to design, integrate, modernize and operate customer systems, including support for both classified and unclassified networks. It also supplies technical expertise and daily operational support, and is a business unit of General Dynamics headquartered in Falls Church, Virginia.

Company size
10,001+
Company stage
Not listed
Total funding
Not listed
Headquarters
Falls Church, VA
Founded
1999

Recently Posted Jobs

Explore more opportunities at General Dynamics Information Technology

See more jobs