Cybersecurity Analyst SME

Public Trust: None

Requisition Type: Pipeline

Your Impact

Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.

Job Description

GDIT is seeking a Security Operations Center Manager to help support the Defense Manpower Data Center (DMDC) Cybersecurity, Privacy, Records, Information Management, and Environments Support (Cyber Primes) program

As a Security Operations Center (SOC) Manager, you will be part of a team who is responsible for securing the operations for DMDC and DHRA’s networks via the SOC.

The SOC is the central hub of cybersecurity event monitoring, focused on incident detection, triage, and analysis with the objective of providing continuous monitoring and event analysis to quickly identify security concerns/incidents in a timely manner.

The SOC team is responsible for monitoring, triage, and analysis of all security alerts, along with escalation to Incident Response within the DHRA area of responsibility. Cyber events are triggered 24-hours a day, 7-days a week, 365-days a year (24x7x365).

MEANINGFUL WORK AND PERSONAL IMPACT:

As a SOC Manager, you will contribute to a fast-paced team and be responsible for the SOC. We are seeking a highly experienced and knowledgeable SOC Manager to support our Department of War (DOW) contracts. The ideal candidate will possess extensive expertise in cybersecurity, threat detection, incident response, and compliance within federal government environments.

WHAT YOU’LL NEED TO SUCCEED - REQUIRED:

Bring your expertise along with a drive for innovation to GDIT.

• Citizenship: US Citizenship required for contract
• Certification(s): One of the following certification from the following: CCNA, CySA+, CFR, GCFA, GCIA, or GICSP
• Education: Bachelor’s degree or experience in lieu of education in Cybersecurity, Information Technology, Computer Science, or a related field.
• Years’ Experience: 10+ years of experience in cybersecurity

• Technical skills :
  • May serve as a team or task lead
  • May coach and provide guidance to less experienced professionals
  • Investigates, analyzes, and responds to cyber incidents within a network environment or enclave
  • Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purpose of mitigating threats
  • Interprets, analyzes, and reports all events and anomalies in accordance with computer network directives, including initiating, responding, and reporting discovered events
    Evaluates, tests, recommends, coordinates, monitors, and maintains cybersecurity policies, procedures, and systems, including access management for hardware, firmware, and software
  • Ensures that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with cybersecurity standards
  • Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security
  • Develop techniques and procedures for conducting cybersecurity risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks
  • The ability to Develop and maintain Tactics, Techniques and Procedures (TTPs) for the SOC
  • The ability to Maintain and provide process improvements on SOC processes and procedures
  • The ability to Manage Cyber Incidents which includes triage, communication, documenting and responding to the incident in accordance with DoW regulations and policies.
  • The ability to communicate and provide summaries which can include presentations to all levels of leadership
  • The ability to manage tasks in accordance with DoW government contracts

• Location: Seaside, CA
• Security Clearance level: Active DOW Top Secret Clearance

DESIRED QUALIFICATIONS:

• Certification(s): Security+, CISSP

GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
● Growth: AI-powered career tool that identifies career steps and learning opportunities
● Support: An internal mobility team focused on helping you achieve your career goals
● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
● Flexibility: Full-flex work week to own your priorities at work
● Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY
Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.

Work Requirements

Years of Experience

10 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

Travel Required

Less than 10%

Citizenship

U.S. Citizenship Required