[Hiring] Security Compliance Analyst @General Dynamics Information Technology

Role Description

Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program. The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States.

The Security & Compliance Analyst will work as part of the CMM Data Modernization and Governance team responsible for delivering an integrated data governance, engineering, data platform, reporting, analytics, and Artificial Intelligence (AI)/Machine Learning (ML) capabilities that support operational decision-making and fulfill AO's data and analytics objectives in support of the CMM program.

The Security & Compliance Analyst will execute the following responsibilities:

• Support analysis of systems, programs, and/or planning activities across the CMM operational environment.
• Perform research in support of policies, procedures, and other technical documentation, and support analysis of IA/Cyber-related programs and initiatives.
• Research and analyze options to develop relationships and solutions that resolve problems within the specialty area.
• Analyze information assurance-related technical problems and provide engineering and technical support in solving them.
• Design, develop, engineer, and implement solutions that meet network security requirements.
• Perform vulnerability and risk analyses of computer systems and applications during all phases of the system development life cycle.
• Establish and satisfy complex system-wide information security requirements based on the analysis of user, policy, regulatory, and resource demands.
• Support customers in the development and implementation of security policies.
• Provide 24/7 supplemental monitoring of the operational environment and escalate critical, service-impacting issues within 30 minutes.
• Prepare monthly incident and problem management reports, ensuring operations remain compliant and responsive during and after releases.
• Define data privacy, security, retention, and classification rules; manage data classification, sensitive data governance, and data sharing agreements.
• Support Authority to Operate (ATO) documentation and gather supporting artifacts for ATO packages.
• Monitor performance scans and system logs, analyzing and reporting vulnerabilities.
• Investigate and analyze security issues and incidents, leveraging SIEM tools for monitoring and log analysis.
• Maintain awareness of emerging security threats and modern attack methods to inform monitoring and response activities.

Qualifications

• BS/BA degree with 5+ years of experience in information systems providing enterprise cybersecurity through policy, architecture, and training processes.
• Experience developing plans to safeguard sensitive data against accidental or unauthorized modification, destruction, or disclosure.
• Experience working with Agile teams and SAFe, responding to security assessments, and providing oversight of vulnerability audits and assessments.
• Experience may be considered in lieu of degree.
• Experience using tools to detect cloud-based security issues (1-2+ years' experience).
• Exposure to SIEM tools such as Splunk for monitoring and log analysis (1-2+ years' experience).
• Prior experience performing incident response and forensics (1-2+ years' experience).
• Knowledge of modern security methods, vulnerabilities, and emerging threats.
• Experience with software and security testing, including containerized applications.
• Understanding of data privacy, retention, and classification requirements in a regulated environment.
• Familiarity with data governance, metadata management, and data quality practices.
• Experience with SQL for data querying and validation.
• Proficiency with BI/reporting tools such as Power BI, Tableau, or QuickSight.
• Familiarity with statistical analysis tools/techniques (e.g., Excel, R, Python) preferred.
• Experience with cloud data platforms (Snowflake, Databricks, AWS preferred).
• Understanding of data architecture concepts (data lake, lakehouse, warehouse).
• Strong analytical, problem-solving, & statistical analysis skills with attention to detail and data accuracy.
• Preferred: Certified Information Systems Security Professional (CISSP).

Requirements

• Excellent presentation and communication (oral and written) skills.
• Consultant mindset with the ability to work with high level customer stakeholders and build excellent customer relationships.
• Experience identifying and applying industry tools, solutions, methods best practices, and emerging technologies.
• Strong analytical skills and problem-solving skills with the ability to formulate and communicate recommendations for improvement.
• Demonstrated ability to work effectively, independently, and as part of a team.
• Strong compliance mindset, with the ability to translate security and privacy requirements into clear governance guidance for stakeholders and leadership.

Benefits

• A variety of medical plan options, some with Health Savings Accounts.
• Dental plan options.
• A vision plan.
• A 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
• Full flex work weeks where possible.
• A variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• 15 days of paid leave per calendar year for vacations, personal business, and illness.
• 10 paid holidays per year.
• Paid Family Leave program providing up to 160 hours of paid leave in a rolling 12 month period for eligible employees.
• Short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance.