Principal Cyber Analyst: RMF, A&A & Classified Cloud

General Dynamics Information Technology (GDIT); McLean (VA); On-site; USD 170,000 - 229,000; Full time

Benefits offered by this job

Health benefits

401K with company match

Paid time off

Flexible work weeks

Job summary

GDIT in McLean, VA seeks a Cyber Analyst Principal to lead RMF A&A for classified commercial cloud services, guiding governance, risk, and compliance efforts and communicating risk to senior leadership. On-site role focusing on security engineering, continuous monitoring, and cross-domain solutions, collaborating with ISSM and Cyber Lead to ensure authorization and secure operations.

This position offers growth in a dynamic defense and intelligence environment and requires TS/SCI with Polygraph

Qualifications

• Active TS/SCI with Polygraph is required.
• DoD 8140 / 8570.01-M compliant.
• BA/BS Degree or equivalent experience.
• 5+ years of related experience.
• Expert knowledge of the NIST SP 800 series and risk management principles.
• Hands-on ISSO/ISSM experience with ICD 503.
• Experience navigating IC RMF for classified cloud services and Cross Domain Solutions.

Responsibilities

• RMF & A&A support for classified cloud services and CDS.
• Security engineering & system hardening tasks.
• Security Control Assessor & auditing activities.
• Continuous Monitoring & GRC responsibilities.
• Execute A&A for classified offerings and maintain artifacts.
• Maintain evidence for A&A packages.
• Support IC Continuous Monitoring requirements.
• Identify vulnerabilities from scans and STIGs.
• Prepare for security control audits and IC assessments.
• Coordinate security testing and penetration testing activities.

Skills

RMF/NIST expertise

Security engineering

ISSO/ISSM experience

IC RMF for classified cloud

Vulnerability assessment

Education

BA/BS Degree or equivalent

Tools

DoD 8140 / 8570.01-M compliance

Job description

GDIT in McLean, VA seeks a Cyber Analyst Principal to lead RMF A&A for classified commercial cloud services, guiding governance, risk, and compliance efforts and communicating risk to senior leadership. On-site role focusing on security engineering, continuous monitoring, and cross-domain solutions, collaborating with ISSM and Cyber Lead to ensure authorization and secure operations.

This position offers growth in a dynamic defense and intelligence environment and requires TS/SCI with Polygraph