Cybersecurity Analyst, Risk Management Framework

General Dynamics

Confirmed live 2 days ago High trust

Quick summary

Work type: On-site
Location: Annapolis Junction, MDSterling, VA
Salary: $127,500–$172,500 / yr
Posted: 7 days ago
Freshness: Confirmed live 2 days ago
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $160k

This role $150k

$120k most similar roles pay here $198k

This role pays less than 60% of similar roles. Most pay $133,399–$186,944 — the shaded band above. At the midpoint, this role pays about $150k versus about $160k for comparable roles.

Based on 239 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1123 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 984 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Cybersecurity Analyst, Risk Management Framework

Role Posting Log in to save

Cybersecurity Analyst (Risk Management Framework) - TS/SCI w/ Polygraph serves as an Information System Security Officer supporting government activities. The role involves ensuring IT engineering solutions meet high security standards and comply with all applicable mandates to provide a complete Body of Evidence for the government. Daily responsibilities include reporting system status through the Risk Management Framework, authoring System Security Plans and System Security Test Plans, conducting self-assessments, and analyzing the impact of security control changes. The candidate will also manage remediation of findings in Security Assessment Reports, defend waiver justifications, and research vulnerability solutions. Required skills include Information Assurance, Information Systems, and Information Technology expertise. Technical requirements include experience with NIST 800-53 controls, Xacta application proficiency, and DoD 8570 IAT Level II certifications such as Security+, CySA+, or CCNA Security.

Skills

Risk Management Framework NIST 800-53 Xacta Information Assurance Cybersecurity Assessment and Authorization Security+ CySA+ CCNA Security GSEC CND SSCP GICSP System Security Plans Security Assessment Report

What you'll do

Act as an Information System Security Officer (ISSO) for IC cyber systems under development.
Manage the progression of systems through the Risk Management Framework (RMF) to obtain authorizations.
Author System Security Plans (SSP) and System Security Test Plans (SSTP).
Conduct self-assessments and analyze the impact of security control changes on the environment.
Prepare for and assist with formal risk assessments conducted by Security Control Assessors.
Manage the remediation of findings documented in Security Assessment Reports and Plans of Action and Milestones.
Document and defend reasoning for requested waivers or non-standard remediation solutions.
Research remediation options for vulnerabilities identified in systems under development or currently in production.

What we're looking for

Must be a United States citizen.
Must possess an active Top Secret/SCI clearance with a Polygraph.
Must meet DoD 8570 IAT Level II requirements, such as Security+ CE, CND, SSCP, GSEC, GICSP, CySA+, or CCNA Security.
Must have a Bachelor's degree in a related technical discipline and at least 6 years of experience.
Must have IC (SCI) RMF Assessment and Authorization experience.
Must have hands-on experience with the Xacta application.
Must be able to explain the intent of all NIST 800-53 security controls.
US Citizenship.

Save