Cybersecurity Information Security Assessor

General Dynamics Information Technology•Fort Meade, MD

6d•$127,500 - $172,500•Onsite

About The Position

GDIT is seeking a Cybersecurity Information Security Assessor for the DISA Defense Enterprise Office Solution (DEOS) program. The role provides integrated cybersecurity and systems engineering support for cloud collaboration services delivered to DoD customers. It designs and sustains secure architectures for Azure-hosted workloads, implements and automates controls for DEOS environments, and coordinates incident response with DISA and program stakeholders. The assessor uses consultative approaches to uncover security and operational needs, anticipate threats, and position secure solutions that protect DoW information and ensure DEOS mission availability. The position is 100% onsite in Chantilly, Virginia. No travel costs will be provided. Travel is listed as less than 10%. The schedule is 40 hours per week. The role includes engineering and maintaining secure Azure architectures and virtual machines; automating secure operations and compliance; supporting Risk Management Framework and Authority to Operate activities; mapping and implementing DISA and DoD controls; identifying and communicating risks; coordinating incident triage and response; engaging with customer and program stakeholders; and maintaining technical and compliance documentation. Activities must align with GDIT security practices, DEOS governance processes, and applicable ISO 27001 expectations. The required qualifications include a bachelor’s degree or four additional years of experience in lieu of a degree, an active Secret clearance, a current 8570 IAT Level II certification, and at least six years of related experience. Candidates need relevant hands-on experience supporting DoW or DISA programs, Azure systems and automation, RMF/ATO compliance and documentation, and incident response. Strong consultative communication skills are also required. Preferred qualifications include an appropriate DoW 8570/8140 baseline certification, Microsoft Azure certifications or relevant Microsoft 365 experience, prior DISA or DoW collaboration/cloud program experience, and experience with large distributed operations teams and SOCs in a 24x7 mission environment.

Requirements

Bachelor’s degree, or four additional years of experience in lieu of a degree.
Active Secret security clearance.
Current 8570 IAT Level II certification, such as Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP.
At least 6 years of related experience.
Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands-on work with production systems.
Azure experience deploying and managing virtual machines, implementing secure configurations, patching and monitoring, and developing or operating Azure Automation Runbooks.
Experience with RMF/ATO processes, including DoW RMF, DoD Cloud Computing SRG, DISA STIGs, vulnerability scanning, and associated documentation.
Experience participating in or coordinating incident response for complex systems, including triage, containment, eradication, recovery, and lessons learned.
Strong consultative communication skills and the ability to explain complex security and systems engineering topics to technical and non-technical stakeholders.
U.S. citizenship required.

Nice To Haves

DoW 8570/8140 baseline certification at the appropriate level, such as CISM, CASP+, CISSP, or equivalent.
Microsoft Azure certifications, such as AZ-104, AZ-500, or AZ-700, and/or Microsoft 365 security or collaboration experience relevant to DEOS.
Prior experience on DISA or enterprise DoW collaboration/cloud programs.
Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.

Responsibilities

Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments.
Build, configure, and administer Azure Virtual Machines, including operating-system hardening, patching, baseline configuration, and performance tuning.
Develop, maintain, and operate Azure Automation Runbooks for secure operations and compliance, including patching, configuration enforcement, log collection, backup and restoration, and response actions.
Provide technical guidance on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
Support DISA/DoW RMF activities and engineer security requirements into DEOS system designs and implementations.
Contribute to and maintain RMF/ATO artifacts, including SSPs, SARs, POA&Ms, diagrams, and implementation statements for DEOS Azure-hosted components.
Map and implement DISA STIGs, the DoD Cloud Computing SRG, and relevant eMASS controls across Azure virtual machines and associated services.
Identify, document, and communicate security risks and compliance gaps, and recommend practical mitigations.
Coordinate security and operational incident response for DEOS and the Cybersecurity Threat Hunt team.
Participate in incident triage, technical analysis, and root-cause investigations.
Direct technical containment, eradication, and recovery activities in coordination with the DEOS incident manager and DISA stakeholders.
Capture lessons learned and help update runbooks, playbooks, detection rules, and hardening baselines.
Engage with GDIT, DEOS, and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture.
Provide briefings and technical input to change boards, engineering reviews, and security forums.
Support responses to DISA/DoW data calls, audits, inspections, and technical reviews.
Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
Align work with GDIT Security Standard Practices, DEOS governance processes, and applicable ISO 27001/information security management expectations.
Identify opportunities to improve automation, monitoring, and repeatable processes to enhance security, reliability, and operational efficiency.

Benefits

Comprehensive benefits and wellness packages.
401(k) plan with company match.
Competitive pay and paid time off.
Medical plan options, including options with Health Savings Accounts.
Dental plan options.
Vision plan.
Full flex work weeks where possible.
Paid time off plans including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
Growth and learning opportunities through an AI-powered career tool.
Internal mobility support for career goals.