Security Control Assessor - TS/SCI with Polygraph required

At GDIT, people are our differentiator. As a Security Control Assessor, you will help ensure today is safe and tomorrow is smarter. Our work depends on a Security Control Assessor joining our highly skilled team to be a premier provider of cyber security services to the customer. We provide consummate cyber security risk management “as a service” platform across multiple fabrics and centers. We have responsibility to ensure operational IT capabilities provide the client with necessary timeliness, accuracy and security of information demanded from all our highly professional roles. Be the change, lead our change – join us!

HOW A SECURITY CONTROL ASSESSOR WILL MAKE AN IMPACT

• Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems working either alone or as part of a team.
• Ensures integrity of IT systems by identifying and mitigating potential avenues of exploitation including system level attacks and user level attacks.
• Applies experience with RMF, CNSSI 1253, NIST SP 800-53 Rev 5, and NISPOM
• Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)
• Demonstrated experience conducting hands on security testing, analyzing results, documenting risks, and recommending countermeasures
• Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations and instructions
• Develops and documents security evaluation test plans and procedures
• Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation

WHAT YOU’LL NEED TO SUCCEED:

• Education: Bachelor's Degree (Computer Science or Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline)
• Required Experience: 10+ yrs (Must have 4+ yrs of hands-on SCA experience)
• Clearance: TS/SCI with Polygraph
• Required Technical Skills:
• Compliance and vulnerability scanning tools (XACTA, RedSeal, Tenable, Nessus, Splunk, and/or other vulnerability scanners)

• Administer Microsoft Azure environments by assessing existing cloud-based systems for alignment with Azure best practices, and recommending or implementing configuration, security, and performance optimizations

• Strong understanding of the Assessment and Authorization (A&A) process including Cloud Best Practices
• Excellent oral and technical writing skills
• Strongly Desired Certifications: CASP, CISA, CISSP, AWS Cloud Practitioner, AWS Solutions Architect Associate, Microsoft AZ 900, Microsoft AZ-500
• Security Clearance Level: TS/SCI with active polygraph
• Location: McLean, VA - On Customer Site

GDIT IS YOUR PLACE:

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays

#WeAreGDIT
#JET
#VA_2026Alumni