Information Security Analyst Sr Principal

General Dynamics Information Technology•Sterling, VA

1d•$153,000 - $207,000•Onsite

About The Position

The Information Security Analyst Sr Principal will support a federal government customer’s mission by helping achieve and sustain Authorization to Operate (ATO) for enterprise systems. The role sits at the intersection of cloud technologies and Commercial Solutions for Classified (CSfC), and supports an Assessment & Authorization (A&A) team throughout the NIST Risk Management Framework. The analyst develops Security Impact Analyses for system changes and maintains security documentation, including the System Security Plan, Information Security Contingency Plan, and other required security artifacts. The role coordinates with federal officials to obtain and maintain ATO, supports compliance with federal regulations and privacy requirements, investigates security violations, incidents, and vulnerabilities, and performs periodic and ad hoc audits and vulnerability assessments. The position also uses governance, risk, and compliance tools and participates in change management with cross-functional teams, customers, and stakeholders. This is an onsite role in Sterling, Virginia, with less than 10% travel and 40 scheduled weekly hours. An active Secret clearance and U.S. citizenship are required; Top Secret is preferred. The stated likely salary range is $153,000–$207,000, with compensation dependent on experience, location, and possible contractual requirements.

Requirements

8 or more years of related experience.
Technical training, certification(s), or a degree.
Experience or skills in information system security, IT risk management, cybersecurity, compliance, change management, security control statements, and security documentation.
Experience with governance, risk, and compliance tools such as JCAM, Archangel, or Xacta.
Active Secret security clearance.
U.S. citizenship.
Willingness to work onsite and travel less than 10%.

Nice To Haves

Top Secret security clearance is preferred.

Responsibilities

Support the federal customer’s efforts to achieve and sustain Authorization to Operate (ATO) for enterprise systems.
Participate in all phases of the NIST Risk Management Framework, including categorizing information and system components, conducting Privacy Impact Assessments, and developing risk management strategies.
Create and maintain security documentation and develop Security Control Implementation Statements.
Develop, track, and follow up on Plans of Action and Milestones (POAM).
Gather information needed to draft security controls, policies, and process documentation.
Develop Security Impact Analyses for system changes and update the System Security Plan, Information Security Contingency Plan, and other required security artifacts.
Coordinate with federal government officials to obtain and maintain system ATO.
Ensure compliance with federal regulations and privacy requirements.
Investigate information system security violations, incidents, and vulnerabilities, and report findings to management as necessary.
Perform periodic and ad hoc system audits and vulnerability assessments, including reviews of system scans, audit logs, user accounts, application access, file system integrity, and compliance-related configurations.
Use governance, risk, and compliance tools such as JCAM, Archangel, and Xacta.
Participate in the Change Management process and collaborate with cross-functional teams, customers, and stakeholders to help keep IT systems compliant with security requirements.

Benefits

Medical plan options, some with Health Savings Accounts.
Dental plan options.
Vision plan.
401(k) plan with company match.
Paid time off, including vacation, sick and personal time, holidays, and paid parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
Wellness packages.
Full flex work weeks where possible.
Growth and learning opportunities through an AI-powered career tool.
Internal mobility support.
Competitive pay.