Senior ISSO — Cloud & Risk (TS/SCI w/ Poly)

General Dynamics Information Technology; McLean (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health packages

Internal mobility team

Paid vacation and holidays

Job summary

General Dynamics Information Technology (GDIT) in McLean, VA, seeks an experienced Information Systems Security Officer (ISSO) to support customer programs. The ISSO will manage RMF-based security activities, coordinate with engineering teams, and produce security documentation essential for approvals.

Applicants should have a TS/SCI with active polygraph, strong cloud security experience, and ability to translate complex systems into actionable security tests and artifacts.

Qualifications

• Bachelor's degree in a computer-related field (e.g., Computer Science, IT, Cybersecurity).
• 8+ years of information security experience.
• Experience with RMF and NIST SP 800-53 controls.
• Experience securing cloud environments.
• Ability to translate systems into security test plans and perform hands-on testing.

Responsibilities

• Collaborate with security and program teams to cover all security aspects.
• Provide expert RMF/ NIST knowledge to support A&A for systems.
• Prepare SSPs, POA&Ms, and BOE artifacts for sponsor approval.
• Identify security controls and coordinate test plans with engineering and testing staff.
• Lead security audit reviews and ensure proper evidence collection and review.
• Coordinate security testing with external assessors and technical staff.
• Configure and support cloud native services to maintain security posture.

Skills

RMF experience

Cloud security

Linux systems

Vulnerability communication

Education

Bachelor's degree in related field

Job description

General Dynamics Information Technology (GDIT) in McLean, VA, seeks an experienced Information Systems Security Officer (ISSO) to support customer programs. The ISSO will manage RMF-based security activities, coordinate with engineering teams, and produce security documentation essential for approvals.

Applicants should have a TS/SCI with active polygraph, strong cloud security experience, and ability to translate complex systems into actionable security tests and artifacts.