Information Security Analyst Senior

General Dynamics - IT; Florida; On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health and wellness

Internal mobility support

Paid education and certifications

Access to cutting-edge technology

Paid vacation and holidays

Job summary

General Dynamics - IT is seeking an Information Security Analyst Senior to coordinate vulnerability scanning, remediation, and RMF-based security controls. You will maintain tools such as ACAS and Tenable, work with VMware/Hyper-V environments, and collaborate with Engineering and Operations to strengthen defenses.

The role requires a BA/BS with 3+ years of experience (7+ years if no degree), MS Server 2016/2019 expertise, and a DoD-style IAT II certification with a Secret clearance.

Qualifications

• BA/BS and 3+ years of experience (7+ years if no degree).
• Experience with Microsoft Server 2016/2019+ including Active Directory, Radius, DNS, and Group Policy.
• Experience with virtual environments (VMware, Hyper-V).
• Familiar with Trellix ENS and Tenable Security Center (ACAS) scans.
• Familiar with maintaining and operating SQL Server; patching and STIGs.
• IAT Level II certification (DoDIN 8140.01) and a Secret clearance.

Responsibilities

• Manage system vulnerabilities following NIST continuous monitoring standards and RMF controls.
• Identify emergency or priority vulnerabilities and suggest remediation approaches.
• Analyze vulnerability data and prioritize remediation per risk and standards.
• Document vulnerabilities, impacts, and mitigation strategies for stakeholders.
• Update security standards and templates to meet new audit requirements.
• Improve VM practices and ensure best-practice VI/VM frameworks.
• Coordinate data collection for examinations and audits.
• Collaborate with solution vendors to identify potential tools.
• Research, implement, and review information security to protect assets.
• Establish external barriers such as firewalls and related controls.
• Assess systems for weaknesses and document upgrades.

Skills

Active Directory

DNS

Group Policy

Radius

Microsoft Server 2016/2019

VMware

Hyper-V

Trellix ENS

Tenable Security Center

SQL Server

STIGs

IAT Level II

Security Clearance

Education

Bachelor's degree

Tools

ACAS

HBSS

Job description

Transform technology into opportunity as an Information Security Analyst Senior with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you’ll be at the forefront of innovation and play a meaningful part in improving how agencies operate.

Responsible for coordinating the scanning and identification of vulnerabilities associated with hosts connected to the network. Maintains all tools that are used in the scanning and identification of vulnerabilities, as well as the tools used to rationalize, consolidate, and apply additional contextual information. Maintains a cooperative relationship with Engineering and Operations teams to drive remediation efforts.

Responsibilities

• Manages system vulnerabilities in accordance with security requirements utilizing NIST continuous monitoring standards, RMF critical security controls and counter measures based on risk assessments of mission systems.
• Identify and assess specific emergency or priority vulnerabilities, guided by input from other elements of the team such as cyber intelligence, engineering, or operations and suggest specific remediation approaches.
• Analyze vulnerability data and assist with the prioritization and remediation of the identified vulnerabilities commensurate to risk and vulnerability management standards.
• Understand vulnerabilities, their impacts, mitigation techniques, and document and articulate this understanding to various stakeholders.
• Update and develop security standards and templates as required to meet new regulatory/audit/etc. requirements and guidance
• Improve the efficacy and efficiency of specific VM practices across the enterprise, to include vulnerability identification/assessment/remediation.
• Leverage and enhance existing VM frameworks/policies/standards to ensure VM maintains a minimum of industry best practices.
• Coordinate collection of data and documentation in support of examinations/audits.
• Work with existing solution vendors (e.g., ACAS, HBSS) as necessary; identify potential solutions.
• Research, develop, implement, test and review information security in order to protect information and prevent unauthorized access.
• Responsible for gathering information necessary to maintain security and establish functioning external barriers such as firewalls and other security measures.
• Additionally, ISSOs assess and review systems in order to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades.

Required Qualifications

• BA/BS and 3+ years of experience (additional years of experience will be considered in lieu of degree, 7+)
• Experience and training with Microsoft Server 2016/ 2019 or newer to include Active Directory, Radius, DNS and Group Policy.
• Experience and training with virtual environments (VMware, Hyper-V, etc.)
• Familiar with maintaining and operating Trellix ENS (formerly McAfee Endpoint Security) and Tenable Security Center (ACAS) scans.
• Familiar with maintaining and operating SQL server.
• Experienced in applying patches/updates and STIGs.
• Possess and maintain a minimum of IAT level II certification IAW the DoW directive 8140.01 Cyberspace Workforce Management (sec+, CCSP, CASP+)
• Secret clearance
• On Customer Site

GDIT Is Your Place:

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays

#GDITpriority