Cybersecurity Information Security Assessor

General Dynamics IT; Chantilly (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

General Dynamics IT is seeking a Cybersecurity Information Security Accessor for the DEOS program in Chantilly, VA. You will design secure Azure architectures, implement controls, and coordinate response with DISA and program stakeholders.

The role emphasizes RMF/ATO support, Azure automation, and consultative guidance on zero trust, IAM, and boundary protections to ensure mission availability and secure workloads.

Qualifications

• 6+ years of related experience in cybersecurity or systems engineering.
• Active Secret clearance required with ability to obtain higher.
• Current 8570 IAT Level II certification required.
• US Citizenship required.

Responsibilities

• Design, document, and maintain secure Azure architectures for DEOS.
• Build and harden Azure VMs; patching and baseline config.
• Develop runbooks for secure operations and automation.
• Provide guidance on secure design patterns, Zero Trust, IAM.
• Support RMF/ATO activities and create artifacts.
• Coordinate incident response with DISA and stakeholders.
• Document governance and continuous improvement of security processes.

Skills

Cyber Defense

Cybersecurity Operations

Information Assurance

Information Systems

Network Defense

Education

Bachelor's Degree

Job description

Type of Requisition: Regular

Clearance Level Must Currently Possess: Secret

Clearance Level Must Be Able to Obtain: Secret

Public Trust/Other Required: None

Job Family: Cyber and IT Risk Management

Job Qualifications: Skills: Cyber Defense, Cybersecurity Operations, Information Assurance, Information Systems, Network Defense Certifications: None Experience: 6 + years of related experience US Citizenship Required: Yes

GDIT is seeking a Cybersecurity Information Security Accessor for the DISA Defense Enterprise Office Solution (DEOS) program to provide integrated cybersecurity and systems engineering support for cloud collaboration services delivered to DoD customers. This role designs and sustains secure architectures for Azure‑hosted workloads, implements and automates controls for DEOS environments, and coordinates incident response activities with DISA and program stakeholders.

In this role, the DEOS Cybersecurity Information Security Accessor applies consultive approaches to uncover security and operational needs, anticipate threats, and position secure solutions that protect DoW information and ensure DEOS mission availability.

This position is 100% onsite in Chantilly, VA. Please be advised that no travel costs will be provided.

Meaningful Work and Personal Impact

Security & Systems Engineering for DEOS Azure Environments

Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments (e.g., NSGs, Azure VMs supporting M365, management, monitoring, or integration services).

Build, configure, and administer Azure Virtual Machines supporting DEOS, including OS hardening (e.g., DISA STIGs/SRGs), patching, baseline configuration, and performance tuning.

Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (e.g., automated patching, configuration enforcement, log collection, backup/restore, and response actions).

Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.

RMF / ATO and DISA/DoD Compliance Support

Support DISA/DoW Risk Management Framework (RMF) activities for DEOS systems, ensuring security requirements are engineered into designs and implementations from the outset.

Contribute to and maintain RMF/ATO artifacts (SSP, SAR, POA&M, diagrams, implementation statements) specific to DEOS Azure‑hosted components.

Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.

Identify, document, and communicate security risks or compliance gaps to DEOS leadership and customer stakeholders, recommending practical mitigations.

Secure Operations & Incident Response Coordination

Coordinate incident response for security and operational incidents impacting DEOS and the Cybersecurity Threat Hunt team.

Participate in incident triage, technical analysis, and root‑cause investigations.

Direct technical containment, eradication, and recovery activities (e.g., isolate or revoke credentials), in coordination with the DEOS incident manager and DISA stakeholders.

Capture lessons learned and drive assist in updates to runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.

Consultative Customer and Stakeholder Engagement

Engage with GDIT, DEOS and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.

Provide consultancy‑style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.

Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.

Documentation, Governance, and Continuous Improvement

Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.

Ensure activities align with GDIT Security Standard Practices, DEOS‑specific governance processes, and applicable ISO 27001 / information security management expectations.

Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.

What You'll Need to Succeed (Required)

• Education: Bachelor's Degree. An additional 4 years of experience may be substituted in lieu of degree.
• Clearance: Minimum of an active Secret security clearance required.
• Certification: Current 8570 IAT Level II (Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP) required.
• Experience: 6+ years of related experience.
• Technical skills: Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands‑on work with production systems.

Demonstrated Azure exp