TS/SCI Security Control Assessor – On-Site Bethesda

General Dynamics Information Technology; Bethesda (MD); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health and wellness

Internal mobility support

Professional growth opportunities

Paid education and certifications

Cutting-edge technology exposure

Job summary

General Dynamics Information Technology is seeking a Security Control Assessor to own security assessments, write final reports, defend findings, and drive mitigation strategies on customer sites in Bethesda, MD.

The role requires 6+ years in cybersecurity, SCA experience under ICD 503/CNSSI, RMF/NIST SP 800-53, and TS/SCI with active polygraph. You will assess cloud environments and security controls, with opportunities for growth and professional certifications.

Qualifications

• Bachelor's Degree required in a related discipline.
• 6+ years of cybersecurity experience.
• 3 years of SCA experience under ICD 503/CNSSI 1253 and NIST Cybersecurity Framework/RMF.
• Experience performing security assessments in cloud environments (AWS, Google, IBM, Azure, Oracle).
• Active TS/SCI with polygraph clearance.

Responsibilities

• Write final reports and defend all findings, including risk, mitigations, and references.
• Report vulnerabilities identified during security assessments.
• Write RoE, Test Plans, and SOPs for security assessments.
• Conduct security reviews and technical research to improve defenses.

Skills

Vulnerability assessment

IAM & access management

NIST SP 800-53

IV&V of security controls

Threat research

Report writing

Penetration testing planning

Security frameworks (RMF/CNSSI/NIST)

Education

Bachelor's degree in Cybersecurity / CS / related

Tools

Cloud security assessments (AWS/GCP/IBM/Azure/Oracle)

Job description

General Dynamics Information Technology is seeking a Security Control Assessor to own security assessments, write final reports, defend findings, and drive mitigation strategies on customer sites in Bethesda, MD.

The role requires 6+ years in cybersecurity, SCA experience under ICD 503/CNSSI, RMF/NIST SP 800-53, and TS/SCI with active polygraph. You will assess cloud environments and security controls, with opportunities for growth and professional certifications.