Polygraph

General Dynamics Information Technology•McLean, VA

3d•$159,800 - $216,200•Onsite

About The Position

GDIT is hiring an Information Systems Security Management (ISSM) professional to support customer activities and provide cybersecurity risk-management services. The role supports a program, organization, systems, or enclaves and helps ensure information systems are protected and operational IT capabilities deliver timely, accurate, and secure information. The position is onsite at a customer location in McLean, Virginia, and requires an active TS/SCI clearance with polygraph and U.S. citizenship. The ISSM supports Agency Risk Management Framework (RMF) workflows and processes by proposing, coordinating, implementing, and enforcing information-system security policies, instructions, standards, and methodologies. The role coordinates with data custodians, project owners, and other security stakeholders to categorize information systems, assess security and privacy impacts and risks, and document controls in security and privacy plans. It also maintains system information in XACTA, evaluates system and network changes, addresses continuous-monitoring anomalies, and helps maintain security documentation, configurations, and recovery processes. The role requires a bachelor's degree in a specified or closely related technical discipline, at least eight years of related experience, strong documentation skills, and experience with XACTA 360, Continuum, SCAP-compliant tools, RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, and STIGs. CISSP, CISA, NIST Cybersecurity Framework, and AWS Solutions Architect certifications are preferred. The expected schedule is 40 hours per week, with less than 10% travel. The stated salary range is $159,800–$216,200, subject to experience, location, contractual requirements, and other factors.

Requirements

Bachelor's degree in computer engineering, computer science, electrical engineering, information systems, information technology, cybersecurity, or a closely related discipline.
At least 8 years of related experience.
Strong documentation skills for creating and updating policies, process documentation, and procedures.
Experience with XACTA 360, Continuum, and other SCAP-compliant tools.
Demonstrated experience with RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, and STIGs.
Active TS/SCI clearance with polygraph.
U.S. citizenship required.

Nice To Haves

Certified Information Systems Security Professional (CISSP).
Certified Information Systems Auditor (CISA).
NIST Cybersecurity Framework (NCSF) certification.
AWS Solutions Architect Associate or Professional certification.

Responsibilities

Manage analysts engaged in protecting information-system assets from intentional or inadvertent access or destruction.
Support a program, organization, systems, or enclaves and support Agency RMF workflows and processes by proposing, coordinating, implementing, and enforcing information-system security policies, instructions, standards, and methodologies.
Coordinate with the Data Custodian, Project Owner, and ISSM to identify information types, assign security categorizations, determine security and privacy impacts, and manage information security and privacy risk.
Document security controls in the information security and privacy plan or equivalent document, ensuring implemented controls meet or exceed minimum controls defined by CISO guidance.
Maintain current system information in XACTA, including points of contact and artifacts, to support organizational requirements and processes.
Evaluate the impact of network and system changes using RMF processes.
Ensure anomalies identified through the Sponsor's Information Security Continuous Monitoring activities are addressed and remediated in proportion to the risks they pose.
Submit recommendations to stakeholders regarding system configuration deviations from the required baseline.
Develop and maintain a system security plan (SSP).
Conduct periodic reviews to ensure compliance with the SSP.
Ensure security-relevant information-system software, hardware, and firmware configuration management is maintained and documented.
Monitor system recovery processes to ensure security features and procedures are properly restored.
Ensure information-system security documentation is current and accessible to properly authorized individuals.
Formally notify appropriate individuals when changes might affect authorization.
Participate in governance and project reviews identified by the Sponsor.

Benefits

401(k) with company match.
Medical plan options, including some with Health Savings Accounts.
Dental plan options.
Vision plan.
Paid education and certifications.
Paid vacation and holidays.
Paid parental, military, bereavement, and jury duty leave.
Vacation, sick, and personal time off plans.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.