Information Security Analyst Principal

General Dynamics

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Silver Spring, MD
Salary
$97,968–$132,250 / yr
Posted
52 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $168k
This role $115k
$85k $215k
below market most similar roles pay here above market

This role pays less than 90% of similar roles. Most pay $138,737–$198,000 — the blue band above. At the midpoint, this role pays about $115k versus about $168k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Information Security Analyst Principal

The Information Security Analyst Principal joins the team to support the Indian Health Service. This role involves providing information security support for the Department of Health and Human Services, including designing and implementing firewalls and other security infrastructure. The analyst will perform security impact assessments for development changes, manage POAM remediations, and create Standard Operating Procedures like System Security Plans. Key responsibilities include monitoring network configurations, managing user authentication, and ensuring compliance with federal policies such as FIPS 199, FIPS 200, and NIST 800-53. Required skills include IT security implementation, Agile SDLC methodology, and data security administration. The role addresses complex security requirements including zero trust and SBOM within a healthcare technology context, requiring expertise in electronic health records and federal security practices.

What you'll do

  • Provide information security support for DHHS and Indian Health Service systems.
  • Design and implement firewalls and other security infrastructure programs.
  • Analyze information systems to ensure security functions are included in design and architecture.
  • Conduct security impact assessments for development changes during the IHS development process.
  • Implement counter-measures and mitigating controls for identified security risks.
  • Create and maintain Standard Operating Procedures, System Security Plans, and security manuals.
  • Manage the response and remediation of POAMs for government investment supported systems.
  • Communicate impacts of emerging security requirements like zero trust and SBOM to the team.

What we're looking for

  • Must possess a Bachelor's degree in IT Security, Computer Science, or a related technical discipline with 10 years of related experience.
  • Must possess a Master's degree and 8 years of related experience.
  • Must possess a PhD/Doctorate and 6 years of related experience.
  • Must have the ability to pass an IHS background check to obtain an MBI (T2) Public Trust clearance.
  • Must have expert knowledge of data security administration principles, methods, and techniques.
  • Must have broad knowledge of security (IA) practices and tools.
  • Must understand federal security policies and procedures, including FIPS 199, FIPS 200, and NIST 800-53.
  • Must have a security certification such as a CISSP or CISA.
  • Must have IT security implementation and monitoring experience.
  • Must have familiarity with Agile Software Development Lifecycle (SDLC) Methodology.
  • Must have understanding of network configuration and monitoring.
  • Must have familiarity with domain structures, user authentication, and digital signatures.
  • Must have general knowledge of scientific processes, management structures, and technology programs/platforms.
  • Familiarity with Electronic Healthcare technology and operations (preferred).
  • Familiarity with Source Code Control/Version Management software (preferred).
  • Knowledge of the VistA electronic health record or Resource Patient Management System (RPMS) (preferred).
  • Understanding of the Department of Health and Human Services (HHS) Enterprise Performance Life Cycle (EPLC) (preferred).

More like this

Similar roles

Information Security Analyst Principal

General Dynamics

Pearl Harbor, HI 40 days ago $107,744–$140,300
RMF STIGs ACAS DISA SCAP Linux Windows Firewall NIST 800-53 FIPS 199 FIPS 200 Information Assurance Vulnerability Assessment Security Impact Analysis User Authentication Digital Signatures POA&M
5+ yrs exp

Principal Cybersecurity Analyst

Northrop Grumman

Sunnyvale, CA 39 days ago
Risk Management Framework ACAS NESSUS SPLUNK SCAP NIST DIACAP NISPOM Vulnerability Scanning System Audits Security Certification Testing Assessment and Authorization Information Systems Lifecycle Cybersecurity Security Controls Continuous Monitoring
5+ yrs exp

Principal Cybersecurity Analyst

Northrop Grumman

Northridge, CA 25 days ago
Risk Management Framework Assessment & Authorization NIST ACAS Nessus Splunk Trellix SCAP JSIG DAAG Security+ Continuous Monitoring System Audits Security Certification Testing POA&M SCTM
5+ yrs exp

Principal Cybersecurity Analyst

Northrop Grumman

Linthicum, MD 7 days ago $108,800–$163,200
Cybersecurity Risk Management Framework ACAS Nessus Splunk Trellix SCAP NIST JSIG DAAG Security+ CE Continuous Monitoring System Audits Security Certification Testing ST&E POA&M SCTM
5+ yrs exp

Senior Principal Cybersecurity Analyst

Northrop Grumman

Northridge, CA 5 days ago $142,200–$213,400
Cybersecurity RMF Assessment and Authorization (A&A) NIST ACAS Nessus Splunk Trellix SCAP JSIG DAAG Security+ Continuous Monitoring
8+ yrs exp

Senior Information Security Analyst

Betterment

New York, NY 27 days ago $170,000–$185,000
GRC SOC 2 ISO 27001 NIST CSF Vulnerability Management SDLC Application Security Business Continuity Disaster Recovery Audit AI Automation AWS CISSP CISA CISM
6+ yrs exp Hybrid