Cybersecurity Analyst TS/SCI w/ Poly – RMF/ISSO Expert

General Dynamics Information Technology; Maryland; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Comprehensive benefits

401K with company match

Paid time off

Job summary

General Dynamics Information Technology is seeking a Cybersecurity Analyst to support government activities in Sterling, VA or Annapolis Junction, MD. The role involves ensuring security standards, RMF processes, and documentation through a robust Body of Evidence (BoE) for DoD programs.

You will act as an ISSO for IC cyber systems, prepare SSPs/SSTPs, and participate in risk assessments while collaborating with engineers and security teams to maintain compliance and protect critical

Qualifications

• Active TS/SCI with Polygraph
• DoD 8570 Level II certs (e.g., Security+ CE, CND, SSCP, GSEC, GICSP, CySA+, CCNA Security)
• Bachelor’s Degree in a related technical discipline with 6+ years’ experience or equivalent
• Minimum 3 years IC RMF A&A experience and knowledge of collateral vs SCI requirements
• Ability to discuss NIST 800-53 controls and security posture
• Strong written and oral communication; able to work independently or in a team

Responsibilities

• Act as ISSO for IC cyber systems in development.
• Report, document, and brief status of systems through RMF to ISSM or senior leadership.
• Justify security controls per IC guidance and NIST 800-53 requirements.
• Author SSPs and SSTPs; conduct system security self-assessments.
• Support formal risk assessments and remediation activities.

Skills

Active TS/SCI with Polygraph

DoD 8570 Level II certs

Education

Bachelor's Degree +6 years experience

Tools

Xacta

Job description

General Dynamics Information Technology is seeking a Cybersecurity Analyst to support government activities in Sterling, VA or Annapolis Junction, MD. The role involves ensuring security standards, RMF processes, and documentation through a robust Body of Evidence (BoE) for DoD programs.

You will act as an ISSO for IC cyber systems, prepare SSPs/SSTPs, and participate in risk assessments while collaborating with engineers and security teams to maintain compliance and protect critical