Apply on Employer Site

General Dynamics Information Technology · 3 weeks ago

Security Control Assessor - TS/SCI w/ Polygraph

USA VA McLean

Full-time

Onsite

Senior Level, Lead/Staff

$156K/yr - $211K/yr

8+ years exp

General Dynamics Information Technology is a global technology and professional services company delivering consulting and mission services. They are seeking a Security Control Assessor to ensure the safety of information systems, evaluate security controls, and conduct security testing to protect against vulnerabilities.

Artificial Intelligence (AI)Cloud ComputingConsultingCyber SecurityInformation Technology

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction

Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems working either alone or as part of a team

Applies experience with RMF, CNSSI 1253, NIST SP 800-53, and NISPOM

Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)

Demonstrated experience conducting hands on security testing, analyzing results, documenting risks, and recommending countermeasures

Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations and instructions

Demonstrated experience providing threat analysis based on identified security vulnerabilities

Develops and documents security evaluation test plans and procedures

Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation

Qualification

RMFSecurity Content Automation Protocol (SCAP)Security Technical Implementation Guides (STIGs)ComplianceVulnerability scanning toolsAssessmentAuthorization (A&A) processOral skillsThreat analysisTechnical writing skills

Required

Top Secret SCI + Polygraph clearance

8+ years of related experience

US Citizenship required

Bachelor's Degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline

2+ years of technical related experience

Experience with RMF, CNSSI 1253, NIST SP 800-53, and NISPOM

Experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP)

Experience conducting hands-on security testing, analyzing results, documenting risks, and recommending countermeasures

Experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations and instructions

Experience providing threat analysis based on identified security vulnerabilities

Experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation

Strong understanding of the Assessment and Authorization (A&A) process

Excellent oral and technical writing skills

Experience with compliance and vulnerability scanning tools (XACTA, RedSeal, Nessus, Splunk, McAfee ePO, and/or other vulnerability scanners)

Preferred

CASP, CCNP Security, CISA, CISSP, GCED, or GCIH certifications

Benefits

401K with company match

Comprehensive health and wellness packages

Internal mobility team dedicated to helping you own your career

Professional growth opportunities including paid education and certifications

Cutting-edge technology you can learn from

Rest and recharge with paid vacation and holidays

Medical plan options, some with Health Savings Accounts

Dental plan options

A vision plan

A 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match

Full flex work weeks where possible

A variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave

Short and long-term disability benefits

Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

Company

General Dynamics Information Technology

Glassdoor3.9

General Dynamics Information Technology is an IT consulting company that specializes in cyber security, AI, and quantum computing. It is a sub-organization of General Dynamics.

Founded in 1999

Falls Church, Virginia, USA

10001+ employees