below marketmost similar roles pay hereabove market
This role pays more than
54%
of similar roles. Most pay
$130,000–$184,325
— the blue band above.
At the midpoint, this role pays about
$164k
versus about
$157k
for comparable roles.
Based on 240 similar postings.
Employer
About General Dynamics
General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.
General Dynamics currently has
1377 open roles
on FindRole.
Listed pay typically runs
$124,093–$150,385
across 1184 roles with salary data.
The Security Control Assessor joins the Cyber and IT Risk Management team to support and advance critical client missions. This role involves conducting vulnerability scans and recognizing security system flaws within cloud environments including AWS, Google, IBM, Azure, and Oracle. The assessor performs security reviews, technical research, and Independent Verification & Validation of security controls. Key responsibilities include writing penetration testing Rules of Engagement, Test Plans, and Standard Operating Procedures, as well as producing final reports to defend findings regarding risk and mitigation strategies. The position requires expertise in the MITRE ATT&CK Framework, NIST SP 800-53, and ICD 503. Candidates must possess skills in computer networking, cyber defense, and information assurance, specifically regarding TCP/IP, DNS, PKI, and identity management to ensure system confidentiality, integrity, and availability.
Conduct vulnerability scans and identify security flaws in cloud environments like AWS, Azure, and Google.
Perform security assessments of systems and designs to ensure robustness against cyber threats.
Write penetration testing Rules of Engagement, Test Plans, and Standard Operating Procedures.
Report identified vulnerabilities and provide detailed mitigation strategies to stakeholders.
Write final reports and defend all findings regarding risks, vulnerabilities, and security controls.
Conduct security reviews and technical research to improve organizational defense mechanisms.
Perform Independent Verification & Validation (IV&V) of security controls based on NIST and ICD standards.
What we're looking for
Must be a US Citizen.
Must currently possess an active Top Secret SCI with Polygraph clearance.
Must have a Bachelor's Degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a related discipline.
Must have 6+ years of related experience.
Must have cybersecurity experience, including conducting SCAs under ICD 503/CNSSI 1253 NIST, RMF, or similar.
Must have SCA experience within the last three calendar years.
Must have experience performing security assessments in a cloud computing environment (AWS, Google, IBM, Azure, or Oracle).
Security Clearance Level : TS/SCI with active polygraph.
Risk Management Framework
NIST 800-53a
A&A Process
Vulnerability Scanning
Security Controls
Security Compliance Assessment
Information Technology Security
ISSE
ISSO
SCA
Body of Evidence
CompTIA Security+