Cybersecurity Analyst (Risk Management Framework) – TS/SCI w/ Polygraph

General Dynamics Information Technology offers a collaborative, mission-focused environment for professionals protecting IC and government systems. This on-site Cybersecurity Analyst role focuses on Risk Management Framework (RMF) activities and is based in Annapolis Junction, MD, with an option to base in Sterling, VA. The position supports clear career growth within a culture that values innovation and a military-friendly workplace.

Benefits and Culture

• Growth: AI-powered career tool that identifies career steps and learning opportunities.
• Support: An internal mobility team dedicated to helping you reach your career goals.
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay, and paid time off.
• Community: Award-winning culture of innovation and a military-friendly workplace.

Responsibilities

• Serve as the appointed Information System Security Officer (ISSO) for IC cyber systems developed by the engineering team.
• Report, document, and brief the status of systems under development to ensure RMF progression to the ISSM or senior government leadership.
• Provide clear justification meeting security control requirements as specified by the IC, AO, or NIST 800-53 rev 4/5.
• Author System Security Plans (SSP) and System Security Test Plans (SSTP).
• Conduct self-assessments of all systems under development.
• Analyze security controls and assess the impact of changes on the environment.
• Prepare for and assist with formal risk assessments conducted by Security Control Assessors, while contributing to the security assessment test team.
• Ensure remediation of any findings assigned to engineering as documented in the SAR and Plan of Actions and Milestones (POAM).
• Document and defend reasoning when waivers are sought or non-standard remediation solutions are requested for specific controls.
• Assist with the transition of systems granted an ATO to the Operations branch and the assignment of an operations ISSO.
• Research remediation options for vulnerabilities identified in systems under development or production under an ATO.

Requirements

• Active TS/SCI clearance with ability to obtain and maintain a polygraph.
• DoD 8570 IAT Level II requirements with one of the following: Security+ CE, CND, SSCP, GSEC, GICSP, CySA+, or CCNA Security.
• Bachelor’s Degree in a related technical discipline plus six years of experience, or an equivalent combination of education, certification, training, or work/military experience.
• Minimum of three years IC (SCI) RMF Assessment and Authorization (A&A) experience and the ability to describe differences between collateral and SCI authorization requirements as they apply to DoD and IC instructions.
• Ability to articulate the intent of all NIST 800-53 security controls.
• Minimum one year of hands-on experience with the Xacta application.
• Excellent oral and technical writing skills; ability to work independently and as part of a team.

Technologies

Tooling: Xacta

Work Requirements

• 6+ years of related experience (may vary based on technical training, certification(s), or degree).
• Travel: None
• Citizenship: U.S. Citizenship Required