Description
Seize your opportunity to make a personal impact as a Cyber Security Project Engineer supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.
The Cyber Security Project Engineer is responsible for identifying, analyzing, and responding to security incidents across enterprise and cloud environments. This role involves intrusion analysis, forensic collection, malware investigation, and coordination with cyber defense teams to mitigate threats and strengthen the organization's security posture.
Responsibilities:
- Incident Response & Coordination: Lead and support enterprise-wide incident response activities. Coordinate incident response functions within cloud environments. Produce after-action reviews and incident reports for technical and non-technical audiences.
- Threat Detection & Analysis: Collect and analyze intrusion artifacts to support mitigation efforts. Receive, triage, and investigate network alerts from multiple sources. Monitor external threat intelligence to assess potential enterprise impact. Perform cyber defense trend analysis and reporting.
- Forensics & Evidence Handling: Conduct initial, forensically sound image collection and analysis. Preserve evidence integrity in accordance with standards and procedures.
- Documentation & Knowledge Sharing: Develop and publish cyber defense techniques, guidance, and incident findings. Contribute to enterprise knowledge bases and security best practices.
Requirements:
- Education: Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline
- Experience: 8+ years of related experience
- Technical Skills:
- Incident Response & Cyber Defense: Incident response methodologies, categories, and timelines. Cyber defense policies and procedures. Ability to perform damage assessments and determine remediation paths.
- Threat Detection & Intrusion Analysis: Intrusion detection methodologies for host and network environments. Experience using security event correlation tools. Understanding of attack classes, attack stages, and adversary behaviors.
- Malware & Vulnerability Analysis: Malware analysis concepts and containment techniques. Ability to identify, capture, contain, and report malware. Skill in recognizing and categorizing vulnerabilities and associated attacks.
- Network & System Security: Knowledge of network security architecture, topology, and communication principles. Understanding of network protocols (TCP/IP, DHCP, DNS, directory services). Familiarity with network services, interactions, and secure communications. Knowledge of system administration, OS hardening, and application security threats.
- Cloud Security: Understanding of cloud service models and how they affect incident response capabilities.
- Security Clearance Level: TS/SCI with active polygraph
Benefits:
- 401K with company match
- Comprehensive health and wellness packages
- Internal mobility team dedicated to helping you own your career
- Professional growth opportunities including paid education and certifications
- Cutting-edge technology you can learn from
- Rest and recharge with paid vacation and holidays