Senior Information Security Analyst

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret SCI + Polygraph

Clearance Level Must Be Able to Obtain:

Top Secret SCI + Polygraph

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Information Technology (IT) Security Assessments, IT Security Auditing, IT Security Compliance, IT System Security, System Security

Certifications:

None

Experience:

8 + years of related experience

US Citizenship Required:

Yes

Job Description:

YOUR IMPACT 

Own your opportunity to work with the largest government agency in the nation. Make an impact by advancing the Department of War’s mission to keep our country safe and secure. 

OUR COMPANY 

Iron EagleX (IEX), a wholly owned subsidiary of General Dynamics Information Technology (GDIT), delivers agile IT and Intelligence solutions. Combining small-team flexibility with global scale, IEX leverages emerging technologies to provide innovative, user-focused solutions that empower organizations and end users to operate smarter, faster, and more securely in dynamic environments.  

JOB DESCRIPTION 

We are seeking an experienced Senior Information Security Analyst to support the security, compliance, and ongoing authorization of mission-critical information systems. The successful candidate will work closely with technical teams, security stakeholders, and authorizing agencies to protect information system assets, maintain compliance requirements, identify and mitigate cybersecurity risks, and support ongoing Authorization to Operate (ATO) activities.
This role requires a strong understanding of cybersecurity compliance frameworks, risk management, system security controls, vulnerability assessment, and security monitoring within classified environments.

JOB DUTIES (INCLUDE BUT ARE NOT LIMITED TO) 

• Perform procedures necessary to protect information systems and associated assets from intentional or inadvertent unauthorized access, compromise, or destruction.
• Maintain security and compliance documentation required to support ongoing ATO activities.
• Coordinate with technical teams and authorizing agencies to anticipate and address evolving security and compliance requirements.
• Monitor and analyze Intrusion Detection Systems (IDS) to identify potential security issues and coordinate remediation activities.
• Conduct regular security audits to verify that systems are operated securely and that established information systems security policies and procedures are properly implemented.
• Monitor technical architecture and implementation decisions and assess their potential impact on system compliance, security posture, and authorization requirements.
• Identify, assess, communicate, and track cybersecurity risks and recommended mitigation strategies.
• Research, evaluate, test, and support the implementation of new security software, technologies, and devices.
• Develop, implement, enforce, and communicate security policies and plans covering data, software applications, hardware, telecommunications, and information systems.
• Support information security education and awareness initiatives.
• Perform periodic and on-demand system audits and vulnerability assessments, including reviews of user accounts, application access, file systems, and external web integrity.
• Evaluate assessment results to determine system compliance and identify vulnerabilities requiring remediation.

REQUIRED SKILLS 

• 5+ years of professional experience in information security, cybersecurity, information assurance, or a related field.
• Active TS/SCI clearance with Polygraph.
• U.S. Citizenship.
• DoW 8570 compliance at IAT Level I or higher.
• Demonstrated understanding of cybersecurity compliance frameworks, security controls, and system authorization processes.
• Experience assessing, documenting, and clearly communicating cybersecurity and compliance risks to both technical and non-technical stakeholders.
• Experience using Xacta or similar governance, risk, and compliance (GRC) or security authorization tooling.
• Experience supporting security audits, vulnerability assessments, and compliance activities.
• Strong organizational, analytical, and problem-solving skills.
• Ability to effectively collaborate with technical teams, cybersecurity professionals, and government authorizing organization