Security Control Assessor - TS/SCI with Polygraph

General Dynamics Information Technology • Bethesda, MD

1d • Onsite

About The Position

OWN YOUR OPPORTUNITY Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters. Advance your career while impacting our national security in cyber as a Security Control Assessor (Zero Trust Architect Principal) at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. MEANINGFUL WORK AND PERSONAL IMPACT Conduct Security Control Assessments of IC information systems, with specialized expertise evaluating Zero Trust maturity across identity, device, network, application, data, and analytics domains. Review and validate technical evidence of Zero Trust capability implementation, distinguishing verified, testable controls from self-reported claims. Apply hands-on technical knowledge of identity/access management, network segmentation, endpoint detection, data protection, and security monitoring to assess real-world implementation maturity. Identify capability gaps and documents risk-based findings that hold up to senior leadership review. Communicates assessment results clearly to both technical teams and executive stakeholders. Stays current on Zero Trust architecture standards and evolving assessment methodologies.

Requirements

• Bachelor’s degree in computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline.
• Four (4) years of additional demonstrated work experience in Security Control Assessor (SCA) and Defensive Cyber Operations (DCO)Testing will be accepted in lieu of a bachelor’s degree.
• A Master’s degree in an applicable discipline be substituted for three years of demonstrated work experience
• Three (3) years of cybersecurity experience with at least one year of experience conducting SCAs under ICD 503/CNSSI 1253 NIST Cybersecurity Framework, Risk Management Framework (RMF), or a similar framework.
• One full year of SCA experiences within the last three calendar years.
• One full year supporting cloud environment and experience performing security assessments in a cloud environment (AWS, Google, IBM, Azure, and Oracle).
• Must meet Department of Defense (DOD) 8570.01-M baseline certification requirement for Information Assurances Technical (IAT) Level III CASP+CE, CCNP Security, CISA, or CISSP or Associate, GCED, GCIH, or CCSP.
• Knowledge of Independent Verification & Validation (IV&V) of security controls.
• Knowledge of general attack strategies (e.g., MITRE ATT&CK Framework).
• Knowledge of NISPOM, ICD 503, NIST SP 800-53, ICD 705, and other ICDs as appropriate.
• Skill in conducting vulnerability scans and recognizing vulnerability in security systems (e.g., Cloud Environments) ASW, Google, IBM, Azure, and Oracle.
• Make recommendations to the IC CISO or designee for improving TTPS for better cyber threat protection.
• TS/SCI with Polygraph Clearance

Responsibilities

• Conduct Security Control Assessments of IC information systems, with specialized expertise evaluating Zero Trust maturity across identity, device, network, application, data, and analytics domains.
• Review and validate technical evidence of Zero Trust capability implementation, distinguishing verified, testable controls from self-reported claims.
• Apply hands-on technical knowledge of identity/access management, network segmentation, endpoint detection, data protection, and security monitoring to assess real-world implementation maturity.
• Identify capability gaps and documents risk-based findings that hold up to senior leadership review.
• Communicates assessment results clearly to both technical teams and executive stakeholders.
• Stays current on Zero Trust architecture standards and evolving assessment methodologies.

Benefits

• Comprehensive benefits and wellness packages
• 401K with company match
• Competitive pay
• Paid time off
• Full flex work weeks where possible
• Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short and long-term disability benefits
• Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Principal