{"id":2946107,"url":"https://alion.io/job/general-dynamics-information-technology-cyber-security-analyst-isso","title":"Cyber Security Analyst (ISSO)","company":{"id":4418,"name":"General Dynamics Information Technology","domain":"gdit.com","url":"https://alion.io/company/gdit","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":21,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":83927,"max":113549,"currency":"USD","period":"year","gross":null,"usd_annual":113549},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Bash","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"closed","first_seen_at":"2026-10-06T00:00:00Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-27T10:21:54Z","board_verified":false,"closed_at":"2026-10-27T10:21:54Z","days_open":21,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":21},"description":"Type of Requisition:\nRegularClearance Level Must Currently Possess:\nTop SecretClearance Level Must Be Able to Obtain:\nTop SecretPublic Trust/Other Required:\nNoneJob Family:\nCyber and IT Risk ManagementJob Qualifications:\nSkills:\nCybersecurity Compliance, Information Systems, Information System Security, Vulnerability ScanningCertifications:\nNoneExperience:\n6 + years of related experienceUS Citizenship Required:\nYes Job Description:\nThe Cyber Security Analyst (ISSO) is responsible for maintaining the operational security posture, continuous monitoring, and regulatory compliance of assigned Department of Defense (DoD) information systems and coalition network environments. The Cyber Security Analyst (ISSO) works closely with the Information System Security Manager (ISSM), system owners, and network/systems engineering teams to enforce DoD cybersecurity baselines and technical controls throughout the system lifecycle.\nThis role requires hands-on experience with core enterprise cybersecurity tools, including Splunk Enterprise/Enterprise Security (ES), Tenable/ACAS, and Trellix ePolicy Orchestrator (ePO), to drive real-time telemetry analysis, vulnerability management, endpoint compliance, and continuous monitoring (ConMon) under the NIST Risk Management Framework (RMF). All compliance tracking, documentation, and authorization management for assigned systems is executed within eMASS.\nPrimary Responsibilities\n1. SIEM, Security Analytics & Continuous Monitoring\nPerform daily security event reviews, log analysis, and system auditing across servers, network infrastructure, and operating systems in coalition enclaves.\nDevelop and execute complex Search Processing Language (SPL) queries in Splunk Enterprise/ES to aggregate and correlate events across multiple data sources.\nDesign, implement, and maintain Splunk dashboards, visualizations, and alerts to detect anomalous activity, policy violations, and unauthorized access attempts.\nTroubleshoot log ingestion, forwarding, parsing, and telemetry issues, ensuring comprehensive and accurate data collection.\nValidate NTP time synchronization and log integrity across distributed network devices and servers.\nEnsure audit records are collected, retained, and protected in accordance with DoD policies and applicable regulations.\n2. Vulnerability Management & Endpoint Administration\nOperate and maintain the Assured Compliance Assessment Solution (ACAS) utilizing Tenable Security Center and Nessus scanners across enclave infrastructure.\nConfigure, schedule, and execute authenticated/unauthenticated credentialed scans for servers, network devices, databases, and workstations.\nManage ACAS scan policies, credentials, and plugin updates to ensure comprehensive vulnerability coverage.\nAnalyze scan results, validate findings, triage false positives, and track remediation in support of Plans of Action and Milestones (POA&Ms).\nAdminister Trellix ePO within the enterprise enclave, including agent deployment, policy enforcement, update scheduling, and verification of signature/definition compliance.\nProduce endpoint compliance metrics and operational reports for leadership, system administrators, and inspection teams.\n3. Enclave Boundary Defense & Security Administration\nMonitor and maintain the security posture of enclave gateways, firewalls, boundary devices, and intrusion detection/prevention systems (IDS/IPS).\nHelp protect enclave resources against unauthorized access, modification, destruction, or disclosure.\nReview change requests and conduct Security Impact Analyses (SIA) for system modifications, port/protocol changes, and routing updates.\nCoordinate with systems and network administrators to ensure security and monitoring requirements are integrated into system deployments and changes.\n4. Risk Management Framework (RMF) & eMASS Administration\nSupport end-to-end RMF activities in eMASS, including maintaining System Security Plans (SSPs), continuous monitoring strategies, and security control implementation statements.\nPopulate, update, and manage system milestones, control assessments, test results, and POA&Ms within eMASS.\nVerify implementation and enforcement of DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) across assigned systems.\nRequired Qualifications\nEducation & Experience\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.Equivalent relevant experience, military training, or technical certifications may be considered in lieu of a degree.\n7+ years of progressive experience in cybersecurity, information assurance, or security operations supporting DoD systems and networks.\nCertifications\nActive DoD 8570.01-M / DoD 8140 baseline certification meeting IAT Level III \nTechnical Experience\nHands-on operational experience with Splunk Enterprise and/or Splunk Enterprise Security (ES), including SPL query development, correlation searches, dashboard creation, alerting, and forwarder troubleshooting.\nDemonstrated experience configuring, executing, and troubleshooting ACAS/Tenable scans; managing plugins and credentials; and assessing vulnerability findings in support of POA&M management.\nExperience administering Trellix ePO in an enterprise environment, including policy tuning, agent management, and endpoint compliance reporting.\nProven proficiency using eMASS as the primary RMF governance tool for managing packages, documenting controls, uploading test results, and managing POA&Ms.\nIn-depth experience implementing and remediating DISA STIGs and SCAP benchmarks for Windows/Linux systems, applications, and network infrastructure.\nClearance\nActive DoD Secret security clearance (or higher), with the ability to maintain the clearance as a condition of employment.\nPreferred Qualifications\nActive IAT Level III certification (e.g., CASP+ CE, CISSP, or equivalent).\nPrior experience securing and monitoring coalition or partner network enclaves (e.g., CENTRIXS, BICES, Mission Partner Environments [MPE]).\nAdvanced proficiency with eMASS package management, workflow transitions, and artifact mapping.\nTool-specific certifications such as Splunk Certified Power User/Enterprise Admin or Tenable Certified Nessus Auditor.\nScripting experience (e.g., Bash, Python, PowerShell) to support automation of log parsing, reporting, and administrative workflows.\nStrong written and verbal communication skills, including experience presenting technical risk and compliance posture to ISSMs, system owners, and other stakeholders.\nThe likely salary range for this position is $83,927 - $113,549. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Total compensation for international positions varies by tax, social security, and immigration statuses, as well as location. Generally, an international assignment may include allowances, premium uplifts, and/or relocation or transportation benefits, above base salary range noted.Scheduled Weekly Hours:\n40Travel Required:\nLess than 10%Telecommuting Options:\nOnsiteWork Location:\nInternationalAdditional Work Locations:\nTotal Rewards at GDIT:\nOur benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.Our Identity Verification Process:\nAs part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.About Our Work:\nWe are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events at\ngdit.com/tc.\nEqual Opportunity Employer / Individuals with Disabilities / Protected Veterans","description_format":"text","description_chars":9419,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Cybersecurity","National Security","Digital Government","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-20T18:46:04Z"},{"event":"close","at":"2026-10-27T10:21:54Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 21 · green card filings: 4","filings_12m":21,"filings_prev_12m":30,"green_card_filings_12m":4,"median_offered_wage_usd":154900,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":null,"pay":{"stated_usd_annual":113549,"is_top_pay":false},"html_url":"https://alion.io/job/general-dynamics-information-technology-cyber-security-analyst-isso","json_url":"https://alion.io/job/general-dynamics-information-technology-cyber-security-analyst-isso.json","meta":{"generated_at":"2026-10-29T06:19:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9613,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4418},"rest":"https://alion.io/mcp/rest/get_company?id=4418"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgeneral-dynamics-information-technology-cyber-security-analyst-isso"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgeneral-dynamics-information-technology-cyber-security-analyst-isso"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgeneral-dynamics-information-technology-cyber-security-analyst-isso"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/general-dynamics-information-technology-cyber-security-analyst-isso\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgeneral-dynamics-information-technology-cyber-security-analyst-isso"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2946107}},{"tool":"search_jobs","arguments":{"company":"gdit.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2946107},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}