Security Control Assessor - TS/SCI with Polygraph

Public Trust: None

Requisition Type: Regular

Your Impact

Own your opportunity to serve as a critical component of our nation’s safety and security. Make an impact by using your expertise to protect our country from threats.

Job Description

OWN YOUR OPPORTUNITY
Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.

Advance your career while impacting our national security in cyber as a Security Control Assessor (Zero Trust Architect Principal) at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

• Conduct Security Control Assessments of IC information systems, with specialized expertise evaluating Zero Trust maturity across identity, device, network, application, data, and analytics domains.
• Review and validate technical evidence of Zero Trust capability implementation, distinguishing verified, testable controls from self-reported claims.
• Apply hands-on technical knowledge of identity/access management, network segmentation, endpoint detection, data protection, and security monitoring to assess real-world implementation maturity.
• Identify capability gaps and documents risk-based findings that hold up to senior leadership review.
• Communicates assessment results clearly to both technical teams and executive stakeholders.
• Stays current on Zero Trust architecture standards and evolving assessment methodologies.

WHAT YOU’LL NEED TO SUCCEED

• Bachelor’s degree in computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline.
• Four (4) years of additional demonstrated work experience in Security Control Assessor (SCA) and Defensive Cyber Operations (DCO)Testing will be accepted in lieu of a bachelor’s degree.
• A Master’s degree in an applicable discipline be substituted for three years of demonstrated work experience
• Three (3) years of cybersecurity experience with at least one year of experience conducting SCAs under ICD 503/CNSSI 1253 NIST Cybersecurity Framework, Risk Management Framework (RMF), or a similar framework.
• One full year of SCA experiences within the last three calendar years.
• One full year supporting cloud environment and experience performing security assessments in a cloud environment (AWS, Google, IBM, Azure, and Oracle).
• Must meet Department of Defense (DOD) 8570.01-M baseline certification requirement for Information Assurances Technical (IAT) Level III CASP+CE, CCNP Security, CISA, or CISSP or Associate, GCED, GCIH, or CCSP.
• Knowledge of Independent Verification & Validation (IV&V) of security controls.
• Knowledge of general attack strategies (e.g., MITRE ATT&CK Framework).
• Knowledge of NISPOM, ICD 503, NIST SP 800-53, ICD 705, and other ICDs as appropriate.
• Skill in conducting vulnerability scans and recognizing vulnerability in security systems (e.g., Cloud Environments) ASW, Google, IBM, Azure, and Oracle.
• Make recommendations to the IC CISO or designee for improving TTPS for better cyber threat protection.
• Clearance: TS/SCI with Polygraph

GDIT IS YOUR PLACE

• At GDIT, the mission is our purpose, and our people are at the center of everything we do.
• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Community: Award-winning culture of innovation and a military-friendly workplace

#WeAreGDIT
#JET
#VA_2026Alumni

Work Requirements

Years of Experience

8 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

Travel Required

Less than 10%

Citizenship

U.S. Citizenship Required