Security Analyst – World Trade Center Health Program (WTCHP TPA)

GDIT is seeking a Security Analyst to support day-to-day security operations for the World Trade Center Health Program TPA.

This role strengthens protection of PHI/PII, ensures compliance with NIST 800-53/FISMA Moderate and HIPAA, and supports continuous monitoring across cloud and on-premise environments.

Responsibilities:

• Monitor and triage security alerts across SIEM (Splunk), EDR (CrowdStrike), DLP tools, and cloud telemetry.
• Lead or support incident response activities: investigation, containment, eradication, and lessons learned.
• Execute vulnerability management processes including scanning, validation, prioritization, remediation tracking, and reporting.
• Contribute to POA&Ms, SSP updates, audit responses, and control evidence collection.
• Support identity and access governance, least-privilege reviews, and privileged access monitoring.
• Build or refine detection content, playbooks, and automation for common WTCHP security scenarios.
• Partner with engineering, infrastructure, and DevOps teams to embed security into change management processes.
• Maintain runbooks, metrics, and dashboards; report on control health and operational risk.

Required Qualifications:

• 3–5 years in security operations or blue-team roles within regulated healthcare or federal environments.
• Hands-on experience with SIEM (Splunk), EDR (CrowdStrike or similar), vulnerability scanners (Tenable/Nessus), and DLP tools.
• Familiarity with NIST 800-53, HIPAA, RMF, log management, and cloud environments (AWS/Azure).
• CompTIA Security+ (required or must be obtained within 6 months).
• Strong analytical, documentation, and communication skills.
• Ability to participate in on-call rotation.
• Ability to obtain and maintain a Public Trust (Moderate Risk) background investigation.

Preferred Qualifications:

• Additional certifications such as Splunk User/Power User, AWS/Azure security, CySA+, or CEH.
• Experience with ServiceNow/Jira, SPL/KQL queries, Python/PowerShell scripting, or DLP tuning.
• Exposure to FedRAMP control environments, zero-trust principles, and PHI governance.

The likely salary range for this position is $85,093 - $115,000.