Cyber Security Analyst (ISSO)

General Dynamics IT; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

General Dynamics IT is seeking a Cyber Security Analyst (ISSO) to maintain the DoD information systems' security posture and RMF compliance. You will work with ISSM, system owners, and network teams to enforce cyber baselines and controls across the lifecycle, leveraging Splunk, ACAS, and ePO for real-time telemetry and remediation tracking.

Responsibilities include continuous monitoring, log analysis, vulnerability management, and RMF artifacts in eMASS.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related technical discipline.
• 7+ years of progressive experience in cybersecurity, information assurance, or security operations supporting DoD systems and networks.
• Active DoD 8570.01-M / DoD 8140 baseline certification meeting IAT Level III

Responsibilities

• SIEM, security analytics and continuous monitoring of DoD enclave systems.
• Manage vulnerability scanning using ACAS, Tenable and Nessus; triage findings and track remediation.
• Administer Trellix ePO, ensure policy enforcement and endpoint compliance.
• Support RMF activities in eMASS, maintain SSPs and continuous monitoring strategies.

Skills

Cybersecurity Compliance

Information Systems

Information System Security

Vulnerability Scanning

Education

Bachelor's degree in Cybersecurity, CS, or IT

Tools

Splunk Enterprise/ES

Tenable Security Center

Nessus

Trellix ePO

Job description

Type of Requisition:
Regular

Clearance Level Must Currently Possess:
Top Secret

Clearance Level Must Be Able to Obtain:
Top Secret

Public Trust/Other Required:
None

Job Family:
Cyber and IT Risk Management

Job Qualifications:
Skills:
Cybersecurity Compliance, Information Systems, Information System Security, Vulnerability Scanning Certifications:
None Experience:
6 + years of related experience US Citizenship Required:
Yes

Job Description:
The Cyber Security Analyst (ISSO) is responsible for maintaining the operational security posture, continuous monitoring, and regulatory compliance of assigned Department of Defense (DoD) information systems and coalition network environments. The Cyber Security Analyst (ISSO) works closely with the Information System Security Manager (ISSM), system owners, and network/systems engineering teams to enforce DoD cybersecurity baselines and technical controls throughout the system lifecycle. This role requires hands‑on experience with core enterprise cybersecurity tools, including Splunk Enterprise/Enterprise Security (ES), Tenable/ACAS, and Trellix ePolicy Orchestrator (ePO), to drive real‑time telemetry analysis, vulnerability management, endpoint compliance, and continuous monitoring (ConMon) under the NIST Risk Management Framework (RMF). All compliance tracking, documentation, and authorization management for assigned systems is executed within eMASS.

Primary Responsibilities

1. SIEM, Security Analytics & Continuous Monitoring
   Perform daily security event reviews, log analysis, and system auditing across servers, network infrastructure, and operating systems in coalition enclaves.
   Develop and execute complex Search Processing Language (SPL) queries in Splunk Enterprise/ES to aggregate and correlate events across multiple data sources.
   Design, implement, and maintain Splunk dashboards, visualizations, and alerts to detect anomalous activity, policy violations, and unauthorized access attempts.
   Troubleshoot log ingestion, forwarding, parsing, and telemetry issues, ensuring comprehensive and accurate data collection.
   Validate NTP time synchronization and log integrity across distributed network devices and servers.
   Ensure audit records are collected, retained, and protected in accordance with DoD policies and applicable regulations.
2. Vulnerability Management & Endpoint Administration
   Operate and maintain the Assured Compliance Assessment Solution (ACAS) utilizing Tenable Security Center and Nessus scanners across enclave infrastructure.
   Configure, schedule, and execute authenticated/unauthenticated credentialed scans for servers, network devices, databases, and workstations.
   Manage ACAS scan policies, credentials, and plugin updates to ensure comprehensive vulnerability coverage.
   Analyze scan results, validate findings, triage false positives, and track remediation in support of Plans of Action and Milestones (POA&Ms).
   Administer Trellix ePO within the enterprise enclave, including agent deployment, policy enforcement, update scheduling, and verification of signature/definition compliance.
   Produce endpoint compliance metrics and operational reports for leadership, system administrators, and inspection teams.
3. Enclave Boundary Defense & Security Administration
   Monitor and maintain the security posture of enclave gateways, firewalls, boundary devices, and intrusion detection/prevention systems (IDS/IPS).
   Help protect enclave resources against unauthorized access, modification, destruction, or disclosure.
   Review change requests and conduct Security Impact Analyses (SIA) for system modifications, port/protocol changes, and routing updates.
   Coordinate with systems and network administrators to ensure security and monitoring requirements are integrated into system deployments and changes.
4. Risk Management Framework (RMF) & eMASS Administration
   Support end-to-end RMF activities in eMASS, including maintaining System Security Plans (SSPs), continuous monitoring strategies, and security control implementation statements.
   Populate, update, and manage system milestones, control assessments, test results, and POA&Ms within eMASS.
   Verify implementation and enforcement of DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) across assigned systems.

Required Qualifications

Education & Experience
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.Equivalent relevant experience, military training, or technical certifications may be considered in lieu of a degree.
7+ years of progressive experience in cybersecurity, information assurance, or security operations supporting DoD systems and networks.

Certifications
Active DoD 8570.01-M / DoD 8140 baseline certification meeting IAT Level III

Technical Experience
Hands-on operational experience with Splunk Enterprise and/or Splunk Enterprise Security (ES), including SPL query development, correlation searches, dashboard creation,