Cybersecurity Information Security Assessor

General Dynamics Information Technology•Chantilly, VA

6d•Onsite

About The Position

GDIT is seeking a Cybersecurity Information Security Assessor to support the DISA Defense Enterprise Office Solution (DEOS) program, providing integrated cybersecurity and systems engineering support for cloud collaboration services delivered to DoD customers. The role designs and sustains secure architectures for Azure-hosted workloads, implements and automates security controls for DEOS environments, and coordinates incident response activities with DISA and program stakeholders. It uses a consultative approach to identify security and operational needs, anticipate threats, and protect DoW information while ensuring DEOS mission availability. The position is 100% onsite in Chantilly, Virginia; no travel costs will be provided. The scheduled workweek is 40 hours, and required travel is less than 10%. The likely salary range is $127,500–$172,500, with actual compensation dependent on experience, location, and potentially contractual requirements. The assessor designs and maintains secure architectures for DEOS services in Azure and related environments; builds, configures, and administers Azure Virtual Machines; applies hardening, patching, and baseline configurations; and develops and operates Azure Automation Runbooks for secure operations and compliance. The role provides technical guidance on secure design patterns, Zero Trust, identity and access management, and boundary protections. The position supports DISA/DoW Risk Management Framework and authorization activities, maintains RMF/ATO documentation, and implements DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls. It identifies and communicates security risks and compliance gaps, coordinates incident response, participates in triage and investigations, directs containment and recovery activities, and incorporates lessons learned into operational materials and security baselines. The role also engages with GDIT, DEOS, and DISA stakeholders; provides technical input to reviews and forums; supports audits and data calls; maintains technical and governance documentation; and identifies opportunities to improve automation, monitoring, security, reliability, and operational efficiency. Applicants must have an active Secret clearance and a current 8570 IAT Level II certification. A bachelor’s degree is required, though four additional years of experience may substitute for the degree.

Requirements

Bachelor’s degree, or an additional four years of experience in lieu of the degree.
Active Secret security clearance.
Current 8570 IAT Level II certification; examples include Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP.
At least 6 years of related experience.
Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands-on work with production systems.
Demonstrated Azure experience deploying and managing Azure Virtual Machines, implementing secure configurations, patching and monitoring, and developing or operating Azure Automation Runbooks.
Experience with RMF/ATO processes, including DoW RMF, DoD Cloud Computing SRG, DISA STIGs, vulnerability scanning, and associated documentation.
Experience participating in or coordinating incident response for complex systems, including triage, containment, eradication, recovery, and lessons learned.
Strong consultative communication skills and ability to explain complex security and systems engineering topics to technical and non-technical stakeholders.
U.S. citizenship.

Nice To Haves

DoW 8570/8140 baseline certification at the appropriate level, such as CISM, CASP+, CISSP, or equivalent.
Microsoft Azure certifications such as AZ-104, AZ-500, or AZ-700.
Microsoft 365 security or collaboration experience relevant to DEOS.
Prior experience on DISA or enterprise DoW collaboration/cloud programs.
Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.

Responsibilities

Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments.
Build, configure, and administer Azure Virtual Machines, including OS hardening to DISA STIGs/SRGs, patching, baseline configuration, and performance tuning.
Develop, maintain, and operate Azure Automation Runbooks for patching, configuration enforcement, log collection, backup and restore, and response actions.
Advise engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
Support DISA/DoW RMF activities and engineer security requirements into system designs and implementations.
Contribute to and maintain RMF/ATO artifacts, including SSPs, SARs, POA&Ms, diagrams, and implementation statements.
Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.
Identify, document, and communicate security risks and compliance gaps, and recommend practical mitigations.
Coordinate response to security and operational incidents affecting DEOS and the Cybersecurity Threat Hunt team.
Participate in incident triage, technical analysis, and root-cause investigations.
Direct technical containment, eradication, and recovery activities in coordination with the DEOS incident manager and DISA stakeholders.
Capture lessons learned and help update runbooks, playbooks, detection rules, and hardening baselines.
Engage GDIT, DEOS, and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture.
Provide technical briefings and input to change boards, engineering reviews, and security forums.
Support DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.
Develop and maintain technical documentation, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
Ensure activities align with GDIT Security Standard Practices, DEOS governance processes, and applicable ISO 27001/information security management expectations.
Identify opportunities to improve automation, monitoring, and repeatable processes to enhance security, reliability, and operational efficiency.

Benefits

Comprehensive benefits and wellness packages.
401(k) plan with company match.
Competitive pay and paid time off.
Medical plan options, including options with Health Savings Accounts.
Dental plan options and vision plan.
Full flex work weeks where possible.
Paid time off plans that include vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
Growth and learning opportunities through an AI-powered career tool.
Internal mobility support focused on employees’ career goals.
Award-winning culture of innovation and a military-friendly workplace.