Senior Information Security Analyst

General Dynamics Information Technology•USA VA Crystal City - 2521 S Clark St (VAC119), VA

18h•$187,000 - $253,000•Onsite

About The Position

We are seeking an experienced Senior Information Security Analyst to support the security, compliance, and ongoing authorization of mission-critical information systems. The successful candidate will work closely with technical teams, security stakeholders, and authorizing agencies to protect information system assets, maintain compliance requirements, identify and mitigate cybersecurity risks, and support ongoing Authorization to Operate (ATO) activities. This role requires a strong understanding of cybersecurity compliance frameworks, risk management, system security controls, vulnerability assessment, and security monitoring within classified environments.

Requirements

5+ years of professional experience in information security, cybersecurity, information assurance, or a related field.
Active TS/SCI clearance with Polygraph.
U.S. Citizenship.
DoW 8570 compliance at IAT Level I or higher.
Demonstrated understanding of cybersecurity compliance frameworks, security controls, and system authorization processes.
Experience assessing, documenting, and clearly communicating cybersecurity and compliance risks to both technical and non-technical stakeholders.
Experience using Xacta or similar governance, risk, and compliance (GRC) or security authorization tooling.
Experience supporting security audits, vulnerability assessments, and compliance activities.
Strong organizational, analytical, and problem-solving skills.
Ability to effectively collaborate with technical teams, cybersecurity professionals, and government authorizing organizations.
Bachelor’s degree in Computer Science, Software Engineering, or a related field (or equivalent experience)

Nice To Haves

Experience supporting ATO and continuous monitoring activities within DoW or Intelligence Community environments.
Familiarity with Risk Management Framework (RMF) processes and associated security documentation.
Experience working with vulnerability scanning, intrusion detection, and security monitoring technologies.
Experience operating within highly classified or mission-critical information systems environments.
Strong written and verbal communication skills with the ability to translate technical security findings into clearly defined risks and recommended actions.

Responsibilities

Perform procedures necessary to protect information systems and associated assets from intentional or inadvertent unauthorized access, compromise, or destruction.
Maintain security and compliance documentation required to support ongoing ATO activities.
Coordinate with technical teams and authorizing agencies to anticipate and address evolving security and compliance requirements.
Monitor and analyze Intrusion Detection Systems (IDS) to identify potential security issues and coordinate remediation activities.
Conduct regular security audits to verify that systems are operated securely and that established information systems security policies and procedures are properly implemented.
Monitor technical architecture and implementation decisions and assess their potential impact on system compliance, security posture, and authorization requirements.
Identify, assess, communicate, and track cybersecurity risks and recommended mitigation strategies.
Research, evaluate, test, and support the implementation of new security software, technologies, and devices.
Develop, implement, enforce, and communicate security policies and plans covering data, software applications, hardware, telecommunications, and information systems.
Support information security education and awareness initiatives.
Perform periodic and on-demand system audits and vulnerability assessments, including reviews of user accounts, application access, file systems, and external web integrity.
Evaluate assessment results to determine system compliance and identify vulnerabilities requiring remediation.