# Cybersecurity Engineer Sr Principal

**Company**: GDIT
**Location**: McLean, VA
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $170,000 - $230,000
**Category**: Security
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-VA-McLean/Secure-Enclave-System-Engineering-Lead_RQ227239-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_eb0ba6e7-6f5

## Description

Advance your career while impacting our national security in cyber as a Cybersecurity Engineer Sr Principal at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

As a Cybersecurity Engineer Sr Principal, the work you’ll do at GDIT will be impactful to the mission of our customer’s classified commercial cloud environment. You will play a crucial role in engineering and operating security controls for a classified secure workstation enclave, ensuring continuous monitoring, and compliance for mission-critical systems.

Responsibilities:

- Support and lead configuration, hardening, and updates of Linux operating systems, directly contributing to the secure operation of the enclave.

- Collaborate with enclave engineers, system administrators, and vendors to administer and maintain core security applications (SIEM, vulnerability scanning, endpoint protection, insider threat tooling) that safeguard the environment.

- Drive continuous monitoring and incident response activities by validating telemetry, triaging alerts, investigating incidents, and supporting RMF-aligned vulnerability management, endpoint security, and auditing.

- Utilize Red Hat/Linux, Splunk, Tenable, Trellix, Teramind, and Microsoft Active Directory/Group Policy to implement and validate security controls, maintain visibility, and provide actionable insights into the enclave’s security posture.

- Configure, harden, and update Linux operating systems within the secure enclave.

- Administer and monitor core security tools (Splunk SIEM, Tenable, Trellix, Teramind), ensuring telemetry, policies, and integrations function as intended.

- Triage and investigate security alerts and incidents in alignment with the Incident Response Plan.

- Oversee vulnerability and STIG scanning (host inventory, scan policies, and results) and coordinate remediation with the engineering team.

- Ensure complete endpoint visibility and policy enforcement across hosts and insider threat tooling.

- Support RMF Continuous Monitoring activities, including vulnerability management, endpoint security, auditing, and security alert monitoring.

- Contribute to security documentation, control implementation statements, assessment artifacts, and POA&M mitigation activities.

Requirements:

- Education: Bachelor of Arts/Bachelor of Science

- Experience: 10+ years of related experience

- Technical skills:

- Hands-on experience with Red Hat operating system and other Linux distributions

- Hands-on engineering experience administering and maintaining security operations using Splunk (SIEM), Tenable (vulnerability management), and Trellix (endpoint security)

- Hands-on experience with Teramind for insider threat monitoring

- Understanding of Microsoft Active Directory and implementing controls via Group Policy

- Knowledge of the complete NIST SP 800 series (especially 800-37, 800-53, 800-30) and risk management principles

- Security clearance level: Active Top Secret

Benefits:

- Growth: AI-powered career tool that identifies career steps and learning opportunities

- Support: An internal mobility team focused on helping you achieve your career goals

- Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off

- Flexibility: Full-flex work week to own your priorities at work and at home

- Community: Award-winning culture of innovation and a military-friendly workplace

## Skills

### Required
- Red Hat Linux Server
- Splunk Administration
- Tenable Security Center
- Active Directory (AD)
- Trellix
- Teramind
- Microsoft Active Directory/Group Policy
- NIST SP 800 series

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-VA-McLean/Secure-Enclave-System-Engineering-Lead_RQ227239-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)