Information Systems Security Officer - TS/SCI with Polygraph

General Dynamics Information Technology; McLean (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health and wellness

Internal mobility team

Cutting-edge technology access

Paid vacation and holidays

Job summary

General Dynamics Information Technology (GDIT) is seeking an Information Systems Security Officer (ISSO) to support customer activities and advance cyber security initiatives. The ISSO will ensure security across systems, develop documentation (SSPs, POA&Ms, BOE), and coordinate testing with engineers and external teams.

McLean, VA on customer site. Required: TS/SCI with active polygraph, 8+ years in security, strong risk management, and cloud security experience.

Qualifications

• Bachelor's degree in a related discipline.
• 8+ years of experience.
• TS/SCI with active polygraph.
• Strong security and risk management expertise.
• Experience with cloud security environments.
• Ability to translate systems into security test plans and perform testing.
• Knowledge of security policies and guidance.

Responsibilities

• Work with the program security team to cover all aspects of security.
• Prepare SSPs, POA&Ms, and BOE artifacts for sponsor approval.
• Identify security controls and collaborate with engineering to create test plans.
• Perform security testing and analyze results to improve posture.
• Coordinate security testing exercises with external assessment teams.
• Configure and support cloud native services to protect system security posture.

Skills

System security analysis

Risk management

Cloud security

Security testing

Linux

Virtual platforms

Vulnerability communication

Security policies

Education

Bachelor's degree in a related discipline

Tools

AWS

Microsoft Azure

Google Cloud Platform

Job description

Seize your opportunity to make a personal impact as an Information Systems Security Officer supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.

At GDIT, people are our differentiator. As an Information Systems Security Officer (ISSO), you will help ensure today is safe and tomorrow is smarter. Our work depends on an ISSO joining our highly skilled team to be a premier provider of cyber security services to the customer. We provide consummate cyber security risk management “as a service” platform across multiple fabrics and centers. We have responsibility to ensure operational IT capabilities provide the client with necessary timeliness, accuracy and security of information demanded from all our highly professional roles. Be the change, lead our change – join us!

HOW AN ISSO WILL MAKE AN IMPACT

• Work with others on program security team to provide for all aspects of security.
• Provide expert-level knowledge, both in context and execution with the Risk Management Framework to support a NIST SP 800-53 HHM systems through the A&A process.
• Construct thorough and complete security documentation to include, but not limited to, System Security Plans (SSPs), Plan of Actions and Milestones (POA&Ms), and any other artifacts to support the Body of Evidence (BOE), for sponsor's approval.
• Identify security controls and work with engineering, development and testing staff to construct proper test plans and procedures.
• Implement security audit reviews verifying that the audit records are collected and reviewed.
• Coordinate all security testing exercises, working with external assessment teams and technical staff.
• Configure and support various cloud native services to protect the security posture of the system

WHAT YOU’LL NEED TO SUCCEED:

• Education: Bachelors (Computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline)
• Required Experience: 8+ yrs
• Preferred Technical Skills:
• Demonstrated strong technical skills and analytic abilities, as well as experience performing system security analysis and risk management.
• Demonstrated experience with security in cloud environments.
• Demonstrated experience performing complex technical tasks in pursuit of overall goals with minimal direction.
• Demonstrated experience in translating an understanding of systems and applications into security test plans and perform hands on security testing.
• Demonstrated knowledge of risk management methodologies.
• Demonstrated experience to analyze test results and suggest mitigations for security problems.
• Demonstrated technical experiences with system configuration, development, and design specifically around enterprise systems and hypervisors.
• Demonstrated experience with Linux and virtual platforms.
• Documented working experience with public and private information security groups and organizations.
• Possesses experience with communicating vulnerability results and risk posture to senior executives.
• Possess a broad knowledge of Information Security policies and guidance, as well as the ability to assist in researching, evaluating, and developing relevant security policies and guidance
• Security Clearance Level: TS/SCI with active polygraph
• Preferred Certifications:
• CompTIA Security+
  Certified Information System Security Processional (CISSP)
  Certified Information Security Manager (CISM)
  Certified Ethical Hacker (CEH)
  AWS Certified Cloud Practitioner (CCP)
  Microsoft Azure
  Google Cloud Platform (GCP)
• Location: McLean, VA - On Customer Site

GDIT IS YOUR PLACE:

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays