Andrews AFB, MD

Cybersecurity Jobs in Andrews AFB, MD

2 jobs found

Include remote jobs

Today

Information Security Analyst Sr Principal

General Dynamics Information Technology Andrews AFB, MD

Andrews AFB, MD

Today

$119k - $161k/yr Full time Senior Data Security Disa Stigs

Apply Now

Job Description

This Senior/Principal Information Security Analyst role supports the US Battlefield Information Collection and Exploitation System eXtended (US BICES-X) by executing cybersecurity activities, performing audits and vulnerability assessments, and sustaining security accreditation and DoD RMF compliance.

Location and Work Model

Location: Andrews AFB, MD
Workplace: Onsite

Compensation

Salary range: USD 119,000 - 161,000 per year

Role Responsibilities

Perform cybersecurity activities (formally known as Information Assurance (IA)) for a large program, coordinating with government program staff, USAF, and other government agencies to support the creation, dissemination, direction, and auditing of program policy, standards, and operating procedures.
Use available resources to conduct cybersecurity activities and report overall program security posture to senior GDIT and government personnel.
Conduct network and system audits for vulnerabilities using STIGs, DISA SCAP, ACAS vulnerability scanner, and ESS Policy Auditor to mitigate findings across Linux, Windows, Cisco, Juniper, VMWare, and other associated operating systems.
Create, track, and review Plan of Action and Milestones (POA&Ms), including solution identification to support problem remediation and resolution.
Communicate tactical and strategic threat information to Government leaders, Cybersecurity-Ops, and A&A (formerly C&A) staff to enable cyber risk decisions and threat mitigation.
Carry out DoD Risk Management Framework (RMF) in accordance with DoW 8510 by performing security control validation activities and coordinating security testing to ascertain information system security posture.
Maintain security accreditation status, including documentation for multiple DoD classified networks and interconnected systems.
Coordinate with AFRL, USAF, and other organizations to support audits and inspections, providing required documentation for SAVs, ST&Es, and CCRI.
Evaluate firewall change requests and assess organizational risk.
Provide guidance on vulnerability countermeasures and mitigation of non-compliant controls.
Ensure integrity and protection of networks, systems, and applications by enforcing organizational security policies through monitoring of vulnerability scanning devices.
Perform periodic and on-demand system audits and vulnerability assessments, including reviews of user accounts, application access, and file system to determine compliance.
Provide guidance and work leadership to less-experienced technical staff members.
Maintain current knowledge of relevant technology as assigned and participate in special projects as required.

Required Qualifications

Experience: 10+ years required (8+ years preferred)
Clearance: Must possess and maintain a Top Secret/SCI clearance
Education: BA/BS degree (additional years of experience may substitute)
Comprehensive knowledge of data security administration principles, methods, and techniques
Must meet DOW 8570.01M requirements for IAT Level II (e.g., CASP CE)
Understanding of DoW RMF (800-53 Rev 4 and Rev 5)
Understanding of DoW policies and procedures, including FIPS 199, FIPS 200, NIST 800-53, and other applicable policies

Technologies and Frameworks

Security Technical Implementation Guides (STIGs)
DISA SCAP
ACAS vulnerability scanner
ESS Policy Auditor
Linux, Windows
Cisco, Juniper, VMWare
DoW Risk Management Framework (RMF)
DoW 8510
FIPS 199, FIPS 200
NIST 800-53; 800-53 Rev 4, 800-53 Rev 5

Additional Information

Category: Cyber and IT Risk Management
Requisition #: RQ229346
Requisition type: Regular
Travel required: None
Public trust: None
Citizenship: U.S. Citizenship Required
Clearance level listed: Secret

Identity Verification Process

You are expected to be on camera during virtual interviews.
GDIT reserves the right to take your picture to verify your identity and prevent fraud.
By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

View full job page →

2mo ago

Cybersecurity Manager/ISSO

General Dynamics Information Technology Andrews AFB, MD

Andrews AFB, MD

2mo ago Closed

$124k - $166k/yr Full time Manager Senior Cybersecurity Tools

This position is no longer accepting applications (closed Aug 23, 2026).

Job Description

Lead and oversee cybersecurity operations, RMF authorization, and risk management for a large DoD/USAF mission-support program (US BICES-X) at General Dynamics Information Technology, onsite at Andrews AFB, MD.

Responsibilities

Articulate the value of information security to stakeholders at all levels.
Provide guidance to senior leadership on changes affecting cybersecurity posture, risk, and compliance.
Coordinate security inspections, testing, and reviews with a geographically dispersed team.
Develop, issue, and maintain security plans, instructions, SOPs, and guidance for the operating environment.
Report security and compliance matters to government leaders, operations, and ISSO personnel.
Brief senior government and GDIT leadership on cybersecurity metrics, risk indicators, and trends.
Oversee policy standards and ensure implementation approaches align with requirements.
Guarantee deployment of security requirements, policies, and procedures per approved baselines.
Provide remediation guidance to staff and ensure regulatory, contractual, and policy compliance.
Support policy updates using NIST 800-53, best practices, and evolving compliance needs.
Align IT security priorities with the broader cybersecurity strategy and evaluate new technologies.
Support acquisition activities in accordance with DoW/USAF supply chain risk practices.
Assist in managing cybersecurity budgets, staffing, and contractual objectives.
Lead cybersecurity activities for a large program and support policy dissemination and audits.
Assist government ISSMs in preparing ATO, ATC, IATT, POA&M, and RMF/ISSO documentation as required.
Assist in developing and executing required ST&V plans.
Produce ISSO materials, including project briefs and RMF action status for DoW IT packages.
Analyze system architecture, conduct security impact assessments, and propose risk mitigation strategies.
Provide security design oversight for build processes of servers, services, and endpoints.
Ensure hosting facility ATO compliance for dependent systems.
Implement and enforce robust cybersecurity and vulnerability management practices.
Conduct compliance and vulnerability audits using STIG Viewer, DISA SCAP, eMASSter, ACAS, and ESS Policy Auditor across Linux, Windows, Cisco, Juniper, VMware, and related technologies.
Execute Continuous Monitoring activities, including creation, tracking, and closure of POA&Ms and risk acceptances.
Share threat information with government leadership and cybersecurity teams to support risk decisions.
DoW RMF execution in accordance with DoW 8510, including control validation and test coordination.
Coordinate with AFRL, USAF, and other agencies for audits, inspections, CVAs, ST&Vs, and CCRI events as required.
Assess change requests across firewall, systems, and networks to determine organizational risk.
Maintain information system integrity by enforcing security policies and vulnerability monitoring.
Provide leadership and mentorship to junior technical staff.
Maintain current knowledge of relevant security technologies.
Process support tickets using approved ITSM systems.
Perform other cybersecurity tasks as outlined in AFI 17-101 sections 3.12 through 3.14 or as directed by the Cybersecurity Lead.

Requirements

More than 10 years of relevant cybersecurity experience.
Bachelor's degree; equivalent experience may substitute.
Active TS/SCI clearance.
IAM Level III certification (CISSP, CISM, or GSLC).
Strong background in RMF and eMASS is required.
Solid understanding of cybersecurity principles, methodologies, and practices.
Extensive knowledge of NIST, DoW, and AF cybersecurity orders/directives.
Team-oriented and capable of collaborative work in a structured environment.
Excellent multitasking abilities in fast-paced settings.
Highly organized, self-directed, and detail-oriented.
Outstanding written and verbal communication skills.
High integrity, adaptability, resilience, and initiative.

Technologies

STIG Viewer, DISA SCAP, eMASSter, ACAS, ESS Policy Auditor
Linux, Windows, Cisco, Juniper, VMware
RMF, NIST 800-53, DoW 8510, AFI 17-101

Work Requirements

Experience level: 10+ years in related cybersecurity fields.
Travel: 10 - 25 percent.
Citizenship: U.S. Citizenship Required.

Compensation

Salary range: USD 124,093 - 165,600 per year. Final compensation based on experience, location, and contractual requirements.
Benefits and total rewards information available.

Preferred Qualifications

Experience managing personnel (up to 10 staff).
Ability to prioritize multiple tasks in dynamic, fast-paced environments.
Strong communication skills across individual, team, and leadership levels.
Additional role-specific certifications as required.
ITIL Foundations certification.

View full job page →

Cybersecurity Jobs in Andrews AFB, MD

Information Security Analyst Sr Principal

Cybersecurity Manager/ISSO

Get Cybersecurity Jobs in Andrews AFB, MD alerts