below marketmost similar roles pay hereabove market
This role pays more than
91%
of similar roles. Most pay
$117,897–$162,500
— the blue band above.
At the midpoint, this role pays about
$187k
versus about
$140k
for comparable roles.
Based on 240 similar postings.
Employer
About General Dynamics
General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.
General Dynamics currently has
1377 open roles
on FindRole.
Listed pay typically runs
$124,093–$150,385
across 1184 roles with salary data.
JOB TITLE: Cybersecurity Compliance & Continuous Monitoring Analyst
The Cybersecurity Compliance & Continuous Monitoring Analyst joins the Cyber and IT Risk Management team to secure a classified commercial cloud environment. This role involves supporting the full RMF and Assessment & Authorization lifecycle for a workstation secure enclave, ensuring compliance with FedRAMP and CNSSI 1253 requirements. Key responsibilities include maintaining a body of evidence for A&A packages, tracking POA&Ms, and identifying vulnerabilities. The analyst will use Tenable Nessus, Tenable.sc, SCC, and STIG tooling to perform scans, review patching activities, and evaluate system designs. Required expertise includes the NIST SP 800 series, continuous monitoring, and information assurance. The position addresses the technical challenge of maintaining a strong security posture and achieving ATO for complex classified systems within a federal government context.
Support the full RMF and Assessment & Authorization lifecycle for the workstation secure enclave.
Maintain a comprehensive body of evidence for FedRAMP and DoW A&A packages.
Identify, assess, and remediate vulnerabilities using Tenable Nessus, Tenable.sc, and STIG tooling.
Review scan results and patching activities to ensure hardening of operating systems and network devices.
Evaluate system designs and network architectures to ensure security principles are integrated from the outset.
Lead the preparation and execution of security control audits and FedRAMP 3PAO assessments.
Manage a continuous monitoring and GRC program to analyze security data and identify trends.
Support risk assessments and incident response by recommending mitigating controls and providing technical expertise.
What we're looking for
Must be a US Citizen.
Must currently possess an active Top Secret security clearance.
Must be able to obtain a Top Secret/SCI security clearance.
Must have a Bachelor of Arts or Bachelor of Science degree.
Must have 8+ years of related experience.
Must have at least 5 years of direct, hands-on experience as an ISSO or ISSM with a proven track record of achieving and maintaining ATO for classified systems.
Must be DoD 8140 / 8570.01-M compliant.
Must possess expert-level knowledge of NIST SP 800 series (800-37, 800-53, 800-30) and risk management principles.
Must have experience with FedRAMP, CNSSI 1253, continuous monitoring, POA&M management, and A&A documentation.
Must have hands-on experience with Tenable.sc and Tenable Nessus.
Must have experience with DISA STIGs.
CISSP certification is strongly preferred (preferred).
Cybersecurity
Compliance Analysis
Information Security
Information Technology
Systems Engineering
DoD Policy
CISSP
CISM
CASP+
CEH
Software Security
TS/SCI Clearance