Security Control Assessor - TS/SCI with Polygraph required

Job Description:Seize your opportunity to make a personal impact as a Security Control Assessor supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.At GDIT, people are our differentiator. As a Security Control Assessor, you will help ensure today is safe and tomorrow is smarter. Our work depends on a Security Control Assessor joining our highly skilled team to be a premier provider of cyber security services to the customer. We provide consummate cyber security risk management “as a service” platform across multiple fabrics and centers. We have responsibility to ensure operational IT capabilities provide the client with necessary timeliness, accuracy and security of information demanded from all our highly professional roles. Be the change, lead our change – join us!How a Security Control Assessor Will Make an Impact Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems working either alone or as part of a team.Ensures integrity of IT systems by identifying and mitigating potential avenues of exploitation including system level attacks and user level attacks.Applies experience with RMF, CNSSI 1253, NIST SP 800-53 Rev 5, and NISPOM.Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC).Demonstrated experience conducting hands‑on security testing, analyzing results, documenting risks, and recommending countermeasures.Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations and instructions.Develops and documents security evaluation test plans and procedures.Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation.What You'll Need to Succeed Education : Bachelor's Degree (Computer Science or Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline)Required Experience : 10+ years (Must have 4+ years of hands‑on SCA experience)Clearance : TS/SCI with PolygraphRequired Technical Skills:Compliance and vulnerability scanning tools (XACTA, RedSeal, Tenable, Nessus, Splunk, and/or other vulnerability scanners)Strong understanding of the Assessment and Authorization (A&A) process including Cloud Best PracticesExcellent oral and technical writing skillsStrongly Desired Certifications: CASP, CISA, CISSP, AWS Cloud Practitioner, AWS Solutions Architect Associate, Microsoft AZ 900, Microsoft AZ-500Security Clearance Level : TS/SCI with active polygraphLocation : McLean, VA - On Customer SiteGDIT Is Your Place 401K with company matchComprehensive health and wellness packagesInternal mobility team dedicated to helping you own your careerProfessional growth opportunities including paid education and certificationsCutting-edge technology you can learn fromRest and recharge with paid vacation and holidaysTotal Rewards at GDIT Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post‑tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long‑term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret SCI + PolygraphClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphPublic Trust/Other Required:NoneJob Family:Cyber and IT Risk ManagementJob Qualifications:Skills:RMF, Security Content Automation Protocol (SCAP), Security Technical Implementation Guides (STIGs)Certifications:NoneExperience:10 + years of related experienceUS Citizenship Required:YesScheduled Weekly Hours:40Travel Required:Less than 10%Telecommuting Options:OnsiteWork Location:USA VA McLeanAdditional Work Locations:Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans#J-18808-Ljbffr

Government Careers

Show more