Cyber Analyst Principal - TS​/SCI Polygraph

Job Description

GDIT is seeking a highly skilled and multi‑faceted Cyber Analyst Principal for a critical contract role supporting a commercial cloud service provider’s mission‑critical systems. This position requires full‑time onsite work in McLean, VA.

The ideal candidate is a proactive and seasoned professional with extensive, hands‑on experience navigating the Intel Community (IC) Risk Management Framework (RMF) requirements for classified commercial cloud services and cross‑domain solutions. This role requires a unique blend of technical engineering prowess, security assessment and auditing skills, deep expertise in continuous monitoring, and the polish to communicate risk to executive leadership. The Cyber Analyst Principal will be a key contributor to the Governance, Risk, & Compliance (GRC) program, supporting the Information System Security Manager (ISSM), and Cyber Lead in ensuring the unyielding security and integrity of mission‑critical systems.

• RMF & Assessment and Authorization (A&A)
• Security Engineering & System Hardening
• Security Control Assessor (SCA) & Auditing
• Continuous Monitoring & GRC
• Support Assessment & Authorization (A&A) execution for classified commercial cloud service offerings, and Cross Domain Solutions (CDS) as needed, through the entire respective IC RMF life cycles to obtain and maintain the applicable authorizations.
• Assist in maintaining a comprehensive body of evidence for A&A packages.
• Support the monthly and overall IC Continuous Monitoring requirements.
• Work with security engineering to proactively identify and assess vulnerabilities related to scans, STIGs, security controls, etc.
• Support assessment preparation for security control audits, traditional security reviews, and formal inspections, including preparing for and executing IC assessments.
• Meticulously review artifacts, logs, and system configurations to ensure they provide sufficient evidence of compliance.
• Coordinate and/or participate in security testing and penetration testing activities to provide an independent validation of the system’s security posture.

• Security clearance level:
  Must possess a current and active TS/SCI with Polygraph.
• Certifications:
  
  Must be DoW 8140 / 8570.01‑M compliant.
• Education:
  
  BA/BS Degree or equivalent experience.
• Experience:
  
  5+ years of related experience in information assurance and cybersecurity roles.
• Expert‑level knowledge of the complete NIST SP 800 series (especially 800‑37, 800‑53, 800‑30) and risk management principles.
• Progressive experience in information assurance and cybersecurity roles.
• Direct, hands‑on experience as an ISSO or ISSM, with a proven track record of successfully supporting ATO for classified systems under ICD 503 policies.
• Extensive, hands‑on experience navigating the IC RMF requirements for classified commercial cloud services and cross‑domain solutions.
• Location:
  
  Onsite in McLean, VA.

• Certifications:
  
  CISSP (Certified Information Systems Security Professional).

Salary range: $124,093 - $166,750. Salary will be based on experience, geographic location, and contractual requirements.

Benefits include medical, dental, vision, 401(k) with company match, paid time off, flexible work options, and various insurance plans.

Scheduled weekly hours: 40.

Travel required:

Less than 10%.

Telecommuting options:
Onsite.

Work location:

USA, VA, McLean.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans.