Description
Seize your opportunity to make a personal impact as a Cybersecurity Engineer at GDIT. You will serve as a key technical authority supporting Cybersecurity Service Provider (CSSP) and Defensive Cyberspace Operations (DCO), ensuring cyber resiliency across mission systems.
Key Responsibilities:
- Provide technical leadership and oversight across cybersecurity functions, including incident response, cyber defense, threat hunt, forensics, vulnerability management, and threat emulation.
- Oversee 24/7 cyber defense monitoring, detection, and incident classification activities.
- Lead teams performing vulnerability analysis, ACAS posture rollups, IAVM trending, PPSM compliance assessments, and endpoint security rollups.
- Guide intelligence-driven threat hunt missions and develop analytics, rulesets, and countermeasures for CSSP toolsets.
- Oversee technical documentation, quality, and compliance, including SOPs, TTPs, CTOs, COAs, forensic reports, and training materials.
- Lead development and refinement of Elastic dashboards, data enrichment pipelines, anomaly detection models, and threat analytics.
Requirements:
- Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field.
- 7+ years of cybersecurity engineering or cyber operations experience in DoD or federal environments.
- 3+ years in a technical leadership role.
- CISSP – Certified Information Systems Security Professional required.
- Extensive experience with SIEM/EDR platforms, Elastic Stack, ACAS, and cyber defense analytics.
- Strong knowledge of RMF and deep understanding of cyber incident response processes and detection engineering.
Benefits:
- Medical plan options with Health Savings Accounts.
- Dental and vision plans.
- 401(k) plan with company match.
- Paid time off plans, including vacation, sick and personal time, holidays, and parental leave.
- Short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.