Cybersecurity Analyst (Risk Management Framework) – TS/SCI w/ Polygraph
General Dynamics Information Technology · Annapolis Junction, MD · 2 mo ago
Information Technology$128k–$173k/yrFull-time
GDIT is your place to discover new ways to apply the latest technologies securely and expertly. As a Cybersecurity Analyst, you will support Government activities in Sterling, VA or Annapolis Junction, MD, ensuring IT engineering solutions meet the highest security standards and adhere to applicable guidelines and mandates.
Responsibilities
- Act as an appointed Information System Security Officer (ISSO) for IC cyber systems under development.
- Report, document, and brief the status of systems, ensuring timely progression through the Risk Management Framework (RMF).
- Provide clear justification for security control implementation as specified by IC, AO, or NIST-800-53 (Rev 4/5).
- Author System Security Plans (SSP) and System Security Test Plans (SSTP).
- Conduct self-assessments of systems under development.
- Analyze security controls and their environmental impacts.
- Prepare for and assist with formal risk assessments conducted by Security Control Assessors (SCA).
- Ensure remediation of findings documented in the Security Assessment Report (SAR) and Plan of Actions and Milestones (PO&AM).
- Document and defend waivers or non-standard remediation solutions for security controls.
- Assist with transitioning systems granted an ATO to the Operations branch.
- Research remediation options for vulnerabilities in systems under development or in production.
Requirements
- Active TS/SCI with Polygraph clearance.
- Must meet DoD 8570 IAT Level II requirements, including one of the following certifications: Security+ CE, CND, SSCP, GSEC, GICSP, CySA+, or CCNA Security.
- Bachelor’s Degree in a related technical discipline + 6 years of experience, or equivalent combination of education, certification, or work/military experience.
- Minimum of 3 years of IC (SCI) RMF Assessment and Authorization (A&A) experience.
- Ability to describe differences between collateral and SCI authorization requirements.
- Understanding of the intent of all NIST 800-53 security controls.
- Minimum 1 year of hands-on experience with the Xacta application.
- Excellent oral and technical writing skills.
- Ability to work both independently and as part of a team.
- US Citizenship required.
Benefits
- Comprehensive medical, dental, and vision plan options, some with Health Savings Accounts.
- 401(k) plan with company match (pre- and post-tax contributions up to IRS limits).
- Paid time off, including vacation, sick, personal time, holidays, parental, military, bereavement, and jury duty leave.
- Short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel accident insurance.
- Flexible work weeks where possible.
- AI-powered career tool for growth and learning opportunities.
- Internal mobility team focused on career development.
Pay
The likely salary range for this position is $127,500 - $172,500, depending on experience, geographic location, and contractual requirements.
Schedule
- Scheduled Weekly Hours: 40
- Telecommuting Options: Onsite