Cyber Security Analyst (ISSO)

General Dynamics Information Technology•Boone, MO

2d•$92,307 - $124,887•Onsite

About The Position

The Cyber Security Analyst (ISSO) maintains the operational security posture, continuous monitoring, and regulatory compliance of assigned Department of War information systems and coalition network environments. The role works closely with the Information System Security Manager (ISSM), system owners, and network and systems engineering teams to enforce DoW cybersecurity baselines and technical controls throughout the system lifecycle. The position uses Splunk Enterprise/Enterprise Security, Tenable/ACAS, and Trellix ePolicy Orchestrator (ePO) for telemetry analysis, vulnerability management, endpoint compliance, and continuous monitoring under the NIST Risk Management Framework (RMF). Compliance tracking, documentation, and authorization management are conducted in eMASS. This is an onsite position in an international work location, with 40 scheduled weekly hours and less than 10% travel required. The likely salary range is $92,307–$124,887; actual compensation may vary based on experience, geographic location, and contractual requirements. International assignments may include allowances, premium uplifts, and/or relocation or transportation benefits. An active DoW Secret clearance or higher is required and must be maintained. U.S. citizenship is required.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline; equivalent relevant experience, military training, or technical certifications may be considered in lieu of a degree.
7+ years of progressive experience in cybersecurity, information assurance, or security operations supporting DoW systems and networks.
Active DoW 8570.01-M / DoW 8140 baseline certification meeting IAT Level III.
Hands-on experience with Splunk Enterprise and/or Splunk Enterprise Security, including SPL query development, correlation searches, dashboard creation, alerting, and forwarder troubleshooting.
Experience configuring, executing, and troubleshooting ACAS/Tenable scans; managing plugins and credentials; and assessing vulnerability findings for POA&M management.
Experience administering Trellix ePO in an enterprise environment, including policy tuning, agent management, and endpoint compliance reporting.
Proficiency using eMASS to manage RMF packages, document controls, upload test results, and manage POA&Ms.
Experience implementing and remediating DISA STIGs and SCAP benchmarks for Windows/Linux systems, applications, and network infrastructure.
Active DoW Secret security clearance or higher, with the ability to maintain it as a condition of employment.
U.S. citizenship.

Nice To Haves

Active IAT Level III certification, such as CASP+ CE, CISSP, or equivalent.
Prior experience securing and monitoring coalition or partner network enclaves, such as CENTRIXS, BICES, or Mission Partner Environments.
Advanced proficiency with eMASS package management, workflow transitions, and artifact mapping.
Splunk-specific certifications, such as Splunk Certified Power User or Enterprise Admin.
Tenable certification, such as Tenable Certified Nessus Auditor.
Scripting experience with Bash, Python, or PowerShell for automation of log parsing, reporting, and administrative workflows.
Strong written and verbal communication skills, including presenting technical risk and compliance posture to ISSMs, system owners, and stakeholders.

Responsibilities

Perform daily security event reviews, log analysis, and system auditing across servers, network infrastructure, and operating systems in coalition enclaves.
Develop and execute SPL queries in Splunk Enterprise/ES to aggregate and correlate events across data sources.
Design, implement, and maintain Splunk dashboards, visualizations, and alerts to identify anomalous activity, policy violations, and unauthorized access attempts.
Troubleshoot log ingestion, forwarding, parsing, and telemetry issues, and validate NTP synchronization and log integrity.
Ensure audit records are collected, retained, and protected according to DoW policies and applicable regulations.
Operate and maintain ACAS using Tenable Security Center and Nessus scanners across enclave infrastructure.
Configure, schedule, and execute authenticated and unauthenticated scans for servers, network devices, databases, and workstations; manage scan policies, credentials, and plugin updates.
Analyze scan results, validate findings, triage false positives, and track remediation in support of POA&Ms.
Administer Trellix ePO, including agent deployment, policy enforcement, update scheduling, and verification of signature and definition compliance.
Produce endpoint compliance metrics and operational reports for leadership, system administrators, and inspection teams.
Monitor and maintain the security posture of enclave gateways, firewalls, boundary devices, and IDS/IPS.
Protect enclave resources against unauthorized access, modification, destruction, or disclosure.
Review change requests and conduct Security Impact Analyses for system modifications, port/protocol changes, and routing updates.
Coordinate with system and network administrators to integrate security and monitoring requirements into deployments and changes.
Support end-to-end RMF activities in eMASS, maintaining SSPs, continuous monitoring strategies, and security control implementation statements.
Manage system milestones, control assessments, test results, and POA&Ms in eMASS.
Verify implementation and enforcement of DISA STIGs and SRGs across assigned systems.

Benefits

Medical plan options, including plans with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan with company match
Full flex work weeks where possible
Paid time off, including vacation, sick and personal time
Paid holidays
Paid parental leave
Military leave
Bereavement leave
Jury duty leave
Short- and long-term disability benefits
Life insurance
Accidental death and dismemberment coverage
Personal accident insurance
Critical illness insurance
Business travel and accident insurance
International assignment allowances, premium uplifts, and/or relocation or transportation benefits may be offered