Cybersecurity Compliance & Continuous Monitoring Analyst

General Dynamics
United States
Workplace: OnsiteFull timeUSD 158,950 - 215,050 annuallyFunction: CybersecurityExperience: 8+ yearsEducation: bachelorsSkills: []

Support RMF and Assessment & Authorization (A&A) for a classified workstation secure enclave, ensuring compliance with FedRAMP and CNSSI 1253. Maintain FedRAMP/DoD body-of-evidence documentation (including POA&M) and manage continuous monitoring and GRC reporting. Lead security control audits and FedRAMP 3PAO assessments, validate scan results and STIG findings, and help remediate vulnerabilities using Tenable tools and DISA STIG-aligned methods.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
General Dynamics
General Dynamics
16 hours ago

Cybersecurity Compliance & Continuous Monitoring Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 16 hours agoStatus: Live

Job Summary

Support RMF and Assessment & Authorization (A&A) for a classified workstation secure enclave, ensuring compliance with FedRAMP and CNSSI 1253. Maintain FedRAMP/DoD body-of-evidence documentation (including POA&M) and manage continuous monitoring and GRC reporting. Lead security control audits and FedRAMP 3PAO assessments, validate scan results and STIG findings, and help remediate vulnerabilities using Tenable tools and DISA STIG-aligned methods.
Location: United States
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Support the full RMF and Assessment & Authorization (A&A) lifecycle for the workstation secure enclave, including control implementation, assessment, authorization, and continuous monitoring.
  • •Maintain FedRAMP/DoD body-of-evidence documentation for A&A and continuous monitoring requirements, including POA&M tracking, reporting, and remediation.
  • •Identify, assess, and remediate vulnerabilities using Tenable Nessus, Tenable.sc, SCC, DISA STIG tooling, and related security tools; ensure scan policies and host inventory are accurate.
  • •Review scan results, STIG findings, and patching activities to ensure accurate data and effective hardening across operating systems, network devices, and applications.
  • •Lead security control audits and FedRAMP 3PAO assessments, manage continuous monitoring and GRC program reporting, and support risk assessments and incident response with security expertise.
Travel: Low travel

Pay and Benefits

Salary: USD 158,950 - 215,050 annually
Perks:Health InsuranceDentalVision401kPaid LeaveParental Leave

Key Requirements

  • •8+ years of related cybersecurity/compliance experience.
  • •5+ years of direct, hands-on ISSO or ISSM experience maintaining ATO for classified systems.
  • •Expert-level knowledge of NIST SP 800 series, especially 800-37, 800-53, and 800-30, with risk management principles.
  • •Experience with FedRAMP and CNSSI 1253 baselines, continuous monitoring, POA&M management, and A&A body-of-evidence documentation.
  • •Active Top Secret clearance and ability to obtain Top Secret/SCI; must be DoD 8140 / 8570.01-M compliant.
Experience:8+ years
Education:Bachelor's
Certifications:CISSP
Tech Stack:Continuous MonitoringFedRAMPCNSSI 1253DISA STIGRMFAssessment & Authorization (A&A)POA&MTenable NessusTenable.scSTIG toolingNIST SP 800-37NIST SP 800-53NIST SP 800-303PAOPPSMSCC

Eligibility

Security Clearance:Top SecretTop Secret/SCI

Company Brief

General Dynamics
Provides IT, systems engineering, cybersecurity, cloud, and mission support services to U.S. federal civilian and defense agencies, delivering large-scale technology solutions and managed services for national security and government operations.
Industry: Defense Technology
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Tysons / Fairfax, United States
WebsiteLinkedIn