Cybersecurity Compliance & Continuous Monitoring Analyst

CYBER TECHNICAL ANALYST SR PRINCIPAL

Advance your career while impacting our national security in cyber as a Cyber Technical Analyst Sr Principal e, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

As a Cyber Technical Analyst Sr Principal, the work you’ll do at GDIT will be impactful to the mission of our customer’s classified commercial cloud environment. You will play a crucial role in securing and continuously monitoring a classified workstation secure enclave, ensuring it meets stringent FedRAMP and CNSSI 1253 requirements while enabling mission‑critical operations.

• Support the fullRMF and Assessment & Authorization (A&A) lifecyclefor the workstation secure enclave, including control implementation, assessment, authorization, and continuous monitoring.
• Maintain a comprehensivebody of evidence for FedRAMP/DoW A&A packages and continuous monitoring requirements, includingPOA&Mtracking, reporting, and remediation.
• Collaborate with security engineers, system administrators, ISSO/ISSM, vendors, and leadership to integrate and validate security controls and align operations with
  
  FedRAMP, DoD, and CNSSI 1253requirements.
• Identify, assess, and remediate vulnerabilities using
  
  Tenable Nessus, Tenable.sc, SCC, STIG tooling, and related security tools; ensure host inventory and scan policies are accurate and complete.
• Reviewscan results, STIG findings, and patching activities to ensure accurate, actionable data and effective hardening of operating systems, network devices, and applications.
• Evaluatesystem designs, network architectures, firewall rules, and PPSM submissions to ensure security principles are integrated from the outset and architecture risks are addressed.
• Lead preparation and execution of security control audits and FedRAMP 3
  
  PAO assessments, reviewing artifacts, logs, and configurations to validate evidence of compliance and a strong security posture.
• Provide security control assessment and audit oversight, including reviewing and validating implementation work performed by engineers and system administrators.
• Manage a robustcontinuous monitoring and GRC program, aggregating and analyzing security data to identify trends, anomalies, and potential incidents and providing actionable risk insights to leadership.
• Support risk assessments and incident response, recommending mitigating controls and assisting the ISSM and incident response team with artifacts and deep system/security expertise.

Bring your cyber expertise and drive for innovation to GDIT. The Cyber Technical Analyst Sr Principal must have:

Education:

Bachelor of Arts/Bachelor of Science

Experience:

8+ years of related experience

Technical skills:

• Hands‑on experience with Tenable.sc and Tenable Nessus
• Progressive experience in information assurance and cybersecurity roles
• Minimum of 5 years of direct, hands‑on experience as an ISSO or ISSM with a proven track record of achieving and maintaining ATO for classified systems
• Expert‑level knowledge of the NIST SP 800 series (especially 800‑37, 800‑53, 800‑30) and risk management principles
• Experience with FedRAMP and CNSSI 1253 baselines, continuous monitoring, POA&M management, and A&A body‑of‑evidence documentation

Security clearance level:
Active Top Secret

• On‑site McLean, VA
• Must be DoD 8140 / 8570.01‑M compliant
• CISSP strongly preferred

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

Growth: AI‑powered career tool that identifies career steps and learning opportunities

Support:
An internal mobility team focused on helping you achieve your career goals

Rewards:
Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off

Community:
Award‑winning culture of innovation and a military‑friendly workplace

Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.