Information System Security Officer

General Dynamics Information Technology•Falls Church, VA

4d•$81,349 - $88,550•Onsite

About The Position

As an Information System Security Officer at GDIT, you will help safeguard government systems through security governance, risk evaluation, and compliance oversight. The role applies prior ISSO/ISSM experience to managing RMF controls, system documentation, security assessments, and continuous monitoring activities. It is oriented toward risk, audit, and compliance work that can influence the security posture of multiple systems and programs. The position supports the customer’s mission by identifying risks, validating controls, and advancing security improvements. It involves working with ISSOs/ISSMs, technical teams, system owners, and stakeholders to assess findings, recommend remediation, and support authorization and compliance activities. The role is onsite in Falls Church, Virginia, five days per week, with possible work at other local offices. It is a temporary, at-will position expected to end in September 2027.

Requirements

At least 3 years of related experience as a prior ISSO or ISSM.
Bachelor’s degree, or 4+ years of additional work experience, training, or education in lieu of a degree.
IAT II certification, such as Security+, SSCP, or CCNA Security.
Strong understanding of NIST SP 800-53, DoW cybersecurity requirements, and control implementation and assessment practices.
Familiarity with Windows/Linux environments, vulnerability tools, and security baselines.
Must have an active Secret clearance to be considered.
U.S. citizenship required.
Must work onsite in Falls Church, Virginia, and possibly other local offices, five days per week.

Responsibilities

Conduct security audits and RMF control assessments using prior ISSO/ISSM experience.
Review, validate, and enhance security artifacts, including SSPs, POA&Ms, and continuous monitoring deliverables.
Evaluate system security controls for effectiveness, sufficiency, and alignment with NIST 800-53, DoW requirements, and organizational policies.
Work with ISSOs/ISSMs and technical teams to interpret findings, recommend remediation actions, and support timely vulnerability closure.
Analyze system changes, configuration updates, and vulnerability outputs to determine authorization impacts and risk-level adjustments.
Support ATO maintenance by tracking assessments, evidence, and documentation needed for RMF lifecycle execution.
Prepare and deliver clear, risk-focused briefings to system owners and stakeholders on audit findings and compliance status.