Cyber Security Analyst (ISSO)

General Dynamics Information Technology (GDIT) is hiring a Cyber Security Analyst (ISSO) to maintain the security posture, continuous monitoring, and regulatory compliance of assigned DoD information systems and coalition network environments. The role works with security, system-owner, and engineering teams to manage security analytics, vulnerabilities, endpoint compliance, and Risk Management Framework activities.

Responsibilities:

• Perform daily security event reviews, log analysis, and system auditing across servers, network infrastructure, and operating systems in coalition enclaves
• Develop and execute complex Search Processing Language (SPL) queries in Splunk Enterprise/ES to aggregate and correlate events across multiple data sources
• Design, implement, and maintain Splunk dashboards, visualizations, and alerts to detect anomalous activity, policy violations, and unauthorized access attempts
• Troubleshoot log ingestion, forwarding, parsing, and telemetry issues, ensuring comprehensive and accurate data collection
• Validate NTP time synchronization and log integrity across distributed network devices and servers
• Ensure audit records are collected, retained, and protected in accordance with DoD policies and applicable regulations
• Operate and maintain the Assured Compliance Assessment Solution (ACAS) utilizing Tenable Security Center and Nessus scanners across enclave infrastructure
• Configure, schedule, and execute authenticated/unauthenticated credentialed scans for servers, network devices, databases, and workstations
• Manage ACAS scan policies, credentials, and plugin updates to ensure comprehensive vulnerability coverage
• Analyze scan results, validate findings, triage false positives, and track remediation in support of Plans of Action and Milestones (POA&Ms)
• Administer Trellix ePO within the enterprise enclave, including agent deployment, policy enforcement, update scheduling, and verification of signature/definition compliance
• Produce endpoint compliance metrics and operational reports for leadership, system administrators, and inspection teams
• Monitor and maintain the security posture of enclave gateways, firewalls, boundary devices, and intrusion detection/prevention systems (IDS/IPS)
• Help protect enclave resources against unauthorized access, modification, destruction, or disclosure
• Review change requests and conduct Security Impact Analyses (SIA) for system modifications, port/protocol changes, and routing updates
• Coordinate with systems and network administrators to ensure security and monitoring requirements are integrated into system deployments and changes
• Support end-to-end RMF activities in eMASS, including maintaining System Security Plans (SSPs), continuous monitoring strategies, and security control implementation statements
• Populate, update, and manage system milestones, control assessments, test results, and POA&Ms within eMASS
• Verify implementation and enforcement of DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) across assigned systems

Requirements:

• Cybersecurity Compliance, Information Systems, Information System Security, Vulnerability Scanning
• 6 + years of related experience
• Top Secret
• Yes
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline
• Equivalent relevant experience, military training, or technical certifications may be considered in lieu of a degree
• 7+ years of progressive experience in cybersecurity, information assurance, or security operations supporting DoD systems and networks
• Active DoD 8570.01-M / DoD 8140 baseline certification meeting IAT Level III
• Hands-on operational experience with Splunk Enterprise and/or Splunk Enterprise Security (ES), including SPL query development, correlation searches, dashboard creation, alerting, and forwarder troubleshooting
• Demonstrated experience configuring, executing, and troubleshooting ACAS/Tenable scans; managing plugins and credentials; and assessing vulnerability findings in support of POA&M management
• Experience administering Trellix ePO in an enterprise environment, including policy tuning, agent management, and endpoint compliance reporting
• Proven proficiency using eMASS as the primary RMF governance tool for managing packages, documenting controls, uploading test results, and managing POA&Ms
• In-depth experience implementing and remediating DISA STIGs and SCAP benchmarks for Windows/Linux systems, applications, and network infrastructure
• Active DoD Secret security clearance (or higher), with the ability to maintain the clearance as a condition of employment
• Active IAT Level III certification (e.g., CASP+ CE, CISSP, or equivalent)
• Prior experience securing and monitoring coalition or partner network enclaves (e.g., CENTRIXS, BICES, Mission Partner Environments [MPE])
• Advanced proficiency with eMASS package management, workflow transitions, and artifact mapping
• Tool-specific certifications such as Splunk Certified Power User/Enterprise Admin or Tenable Certified Nessus Auditor
• Scripting experience (e.g., Bash, Python, PowerShell) to support automation of log parsing, reporting, and administrative workflows
• Strong written and verbal communication skills, including experience presenting technical risk and compliance posture to ISSMs, system owners, and other stakeholders