Cybersecurity Compliance & Continuous Monitoring Analyst

General Dynamics

Confirmed live today High trust

Quick summary

Work type
On-site
Location
McLean, VA
Salary
$158,950–$215,050 / yr
Posted
51 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $140k
This role $187k
$85k $229k
below market most similar roles pay here above market

This role pays more than 91% of similar roles. Most pay $117,897–$162,500 — the blue band above. At the midpoint, this role pays about $187k versus about $140k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Cybersecurity Compliance & Continuous Monitoring Analyst

The Cybersecurity Compliance & Continuous Monitoring Analyst joins the Cyber and IT Risk Management team to secure a classified commercial cloud environment. This role involves supporting the full RMF and Assessment & Authorization lifecycle for a workstation secure enclave, ensuring compliance with FedRAMP and CNSSI 1253 requirements. Key responsibilities include maintaining evidence for A&A packages, tracking POA&Ms, and identifying vulnerabilities. The analyst will use Tenable Nessus, Tenable.sc, SCC, and STIG tooling to perform security control assessments, review scan results, and validate hardening of operating systems and network devices. The position requires expertise in the NIST SP 800 series, continuous monitoring, and risk management principles. The work focuses on protecting classified systems by integrating security principles into system designs and network architectures while providing actionable risk insights.

What you'll do

  • Support the full RMF and Assessment & Authorization lifecycle for the workstation secure enclave.
  • Maintain a comprehensive body of evidence for FedRAMP and DoW A&A packages.
  • Identify, assess, and remediate vulnerabilities using Tenable Nessus, Tenable.sc, and STIG tooling.
  • Review scan results and patching activities to ensure effective hardening of operating systems and network devices.
  • Evaluate system designs and network architectures to ensure security principles are integrated from the outset.
  • Lead the preparation and execution of security control audits and FedRAMP 3PAO assessments.
  • Manage a continuous monitoring and GRC program to analyze security data and identify trends.
  • Support risk assessments and incident response by recommending mitigating controls and providing technical expertise.

What we're looking for

  • Must be a US Citizen.
  • Must currently possess an active Top Secret security clearance.
  • Must be able to obtain a Top Secret/SCI security clearance.
  • Must have a Bachelor of Arts or Bachelor of Science degree.
  • Must have 8+ years of related experience.
  • Must have at least 5 years of direct, hands-on experience as an ISSO or ISSM.
  • Must be DoD 8140 / 8570.01-M compliant.
  • Must have expert-level knowledge of NIST SP 800 series and experience with FedRAMP and CNSSI 1253 baselines.
  • Must have hands-on experience with Tenable.sc and Tenable Nessus.
  • CISSP certification is strongly preferred (preferred).

More like this

Similar roles

Cybersecurity Compliance & Continuous Monitoring Analyst

General Dynamics

McLean, VA 51 days ago $158,950–$215,050
Continuous Monitoring Cybersecurity Compliance DISA STIG FedRAMP CNSSI 1253 RMF Assessment & Authorization Tenable Nessus Tenable.sc SCC POA&M GRC Incident Response Firewall Rules Network Architecture
8+ yrs exp

Cybersecurity Analyst

Leidos

Orlando, FL 4 days ago $87,100–$157,450
RMF NIST SP 800-53 eMASS Tenable Nessus Security Onion Evaluate-STIG Jira Confluence ICD) 503 Network Security Monitoring Risk Management Cybersecurity Operations Classified Networks TEMPEST
4+ yrs exp

Cybersecurity Compliance Analyst

Booz Allen Hamilton

Arlington, VA 19 days ago $77,600–$176,000
Cybersecurity Compliance Analysis Information Security Information Technology Systems Engineering DoD Policy CISSP CISM CASP+ CEH Software Security TS/SCI Clearance
10+ yrs exp

Cybersecurity Analyst

Booz Allen Hamilton

Indianapolis, IN +1 25 days ago
SIEM Incident Response Threat Intelligence ACAS DoD STIGs SRGs Threat Assessment Security Operations Center (SOC) Information Systems Cybersecurity Hardening Guidance ESS

Cybersecurity Analyst

Northrop Grumman

San Diego, CA 7 days ago
Risk Management Framework (RMF) ACAS Nessus Splunk Trellix SCAP NIST JSIG DAAG Cybersecurity IAM Continuous Monitoring
2+ yrs exp

Cybersecurity Analyst 3/4

Northrop Grumman

Cincinnati, OH 7 days ago $103,600–$155,400
Risk Management Framework RMF Assessment and Authorization A&A NIST JSIG DAAG Security+ CISSP EMASS Xacta ACAS Nessus Splunk SEPM SCAP Security Test and Evaluation ST&E Continuous Monitoring System Audits
5+ yrs exp