Senior Information Security Analyst

Public Trust: None

Requisition Type: Regular

Your Impact

Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.

Job Description

YOUR IMPACT

Own your opportunity to work with the largest government agency in the nation. Make an impact by advancing the Department of War’s mission to keep our country safe and secure.

OUR COMPANY

Iron EagleX (IEX), a wholly owned subsidiary of General Dynamics Information Technology (GDIT), delivers agile IT and Intelligence solutions. Combining small-team flexibility with global scale, IEX leverages emerging technologies to provide innovative, user-focused solutions that empower organizations and end users to operate smarter, faster, and more securely in dynamic environments.

JOB DESCRIPTION

We are seeking an experienced Senior Information Security Analyst to support the security, compliance, and ongoing authorization of mission-critical information systems. The successful candidate will work closely with technical teams, security stakeholders, and authorizing agencies to protect information system assets, maintain compliance requirements, identify and mitigate cybersecurity risks, and support ongoing Authorization to Operate (ATO) activities.
This role requires a strong understanding of cybersecurity compliance frameworks, risk management, system security controls, vulnerability assessment, and security monitoring within classified environments.

JOB DUTIES (INCLUDE BUT ARE NOT LIMITED TO)

• Perform procedures necessary to protect information systems and associated assets from intentional or inadvertent unauthorized access, compromise, or destruction.
• Maintain security and compliance documentation required to support ongoing ATO activities.
• Coordinate with technical teams and authorizing agencies to anticipate and address evolving security and compliance requirements.
• Monitor and analyze Intrusion Detection Systems (IDS) to identify potential security issues and coordinate remediation activities.
• Conduct regular security audits to verify that systems are operated securely and that established information systems security policies and procedures are properly implemented.
• Monitor technical architecture and implementation decisions and assess their potential impact on system compliance, security posture, and authorization requirements.
• Identify, assess, communicate, and track cybersecurity risks and recommended mitigation strategies.
• Research, evaluate, test, and support the implementation of new security software, technologies, and devices.
• Develop, implement, enforce, and communicate security policies and plans covering data, software applications, hardware, telecommunications, and information systems.
• Support information security education and awareness initiatives.
• Perform periodic and on-demand system audits and vulnerability assessments, including reviews of user accounts, application access, file systems, and external web integrity.
• Evaluate assessment results to determine system compliance and identify vulnerabilities requiring remediation.

REQUIRED SKILLS

• 5+ years of professional experience in information security, cybersecurity, information assurance, or a related field.
• Active TS/SCI clearance with Polygraph .
• U.S. Citizenship.
• DoW 8570 compliance at IAT Level I or higher .
• Demonstrated understanding of cybersecurity compliance frameworks, security controls, and system authorization processes.
• Experience assessing, documenting, and clearly communicating cybersecurity and compliance risks to both technical and non-technical stakeholders.
• Experience using Xacta or similar governance, risk, and compliance (GRC) or security authorization tooling.
• Experience supporting security audits, vulnerability assessments, and compliance activities.
• Strong organizational, analytical, and problem-solving skills.
• Ability to effectively collaborate with technical teams, cybersecurity professionals, and government authorizing organizations.

DESIRED SKILLS

• Experience supporting ATO and continuous monitoring activities within DoW or Intelligence Community environments.
• Familiarity with Risk Management Framework (RMF) processes and associated security documentation.
• Experience working with vulnerability scanning, intrusion detection, and security monitoring technologies.
• Experience operating within highly classified or mission-critical information systems environments.
• Strong written and verbal communication skills with the ability to translate technical security findings into clearly defined risks and recommended actions.

WHAT YOU’LL NEED TO SUCCEED

• 5+ years of professional experience in information security, cybersecurity, information assurance, or a related field.

• Education: Bachelor’s degree in Computer Science, Software Engineering, or a related field (or equivalent experience)

• Role requirements: Work is onsite in Crystal City, VA

• Due to US Government Contract Requirements, only US Citizens are eligible for this role

GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities

• Support: An internal mobility team focused on helping you achieve your career goals

• Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off

• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY
Explore a career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your passion for the mission and delivering results. #iexjobs #iexpriority

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

Work Requirements

Years of Experience

8 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)

Travel Required

10-25%

Citizenship

U.S. Citizenship Required