Security Control Assessor

General Dynamics

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Bethesda, MD
Salary: $148,750–$201,250 / yr
Posted: 56 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $157k

This role $175k

$121k $210k

below market most similar roles pay here above market

This role pays more than 72% of similar roles. Most pay $130,000–$184,325 — the blue band above. At the midpoint, this role pays about $175k versus about $157k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1353 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1176 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Security Control Assessor

Role Posting Log in to save

The Security Control Assessor joins the Cyber and IT Risk Management team to support and advance critical client missions. This role involves conducting hands-on security testing, analyzing vulnerabilities, and documenting risk to provide countermeasures. Key responsibilities include developing security evaluation test plans, performing vulnerability scans, and reviewing program-level documentation like system architecture and security plans. The successful candidate will utilize the Risk Management Framework (RMF), NIST SP 800-53, and the MITRE ATT&CK Framework to assess cloud environments including AWS, Google, IBM, Azure, and Oracle. You will also lead Technical Exchange Meetings and provide analysis on network protocols like TCP/IP and DNS. This position requires a Bachelor's Degree, six years of experience, and a TS/SCI clearance with a polygraph to solve complex cybersecurity threats.

Skills

AWS Cloud Azure RMF NIST SP 800-53 MITRE ATT&CK TCP/IP DNS PKI IAM Penetration Testing ICD 503 CNSSI 1253 IV&V SOP

What you'll do

Conduct hands-on security testing and analyze results to document risks and recommend countermeasures.
Develop and document security evaluation test plans, procedures, and Standard Operating Procedures (SOPs).
Assess and calculate risks based on threats, vulnerabilities, and shortfalls uncovered during testing.
Review program-level documentation including system architecture, design documents, security plans, and requirements specifications.
Provide analysis of vulnerabilities and exploitations to identify mitigating countermeasures.
Write final reports to defend findings, including risk assessments, mitigation strategies, and technical references.
Lead Technical Exchange Meetings (TEMs) and application review boards to document action items and results.
Research and develop relevant Information Security policies and guidance for the organization.

What we're looking for

Must be a US Citizen.
Must currently possess an active Top Secret SCI clearance with a polygraph.
Bachelor's Degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or a closely related discipline.
6+ years of related experience.
Cybersecurity experience, including conducting SCAs under ICD 503/CNSSI 1253 NIST RMF or similar.
SCA experience within the last three calendar years.
Experience performing security assessments in a cloud computing environment (AWS, Google, IBM, Azure, or Oracle).
Security Clearance Level : TS/SCI with active polygraph.

Save