Principal Cybersecurity Engineer (Linux)

Public Trust: None

Requisition Type: Regular

Your Impact

Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.

Job Description

GDIT is seeking a Cybersecurity Engineer to support a large Cloud Services government contract to run and maintain our customer cyber tool stack in McLean, VA.

HOW A CYBERSECURITY ENGINEER WILL MAKE AN IMPACT:

• Maintains, configures, and monitors the following security applications:

  • Endpoint security implementation

  • Scanning implementation

  • SIEM implementation

  • Insider Threat Monitoring

• Works with the vendors of the security applications as applicable to maintain security updates, licenses, resolve support issues (e.g., for Tenable plugins), etc.

• Supports the Cybersecurity lead with maintaining the Continuous Monitoring program, specifically around vulnerability management, endpoint security, auditing, and security alert triage/monitoring.

• For the SIEM/SecOps, works with the team to perform the following duties:

  • Ensures the telemetry from the hosts and security applications are forwarded to the SIEM.

  • Configures alerts for privileged activity that would be conducted in the enclave as well as alerts from security advisories.

  • Triages all alerts from the SIEM to ensure activity in the environment is authorized.

  • Investigates, resolves, and reports security incidents in alignment with the Incident Response Plan.

• For scanning, works with the team to perform the following duties:

  • Ensures the inventory of hosts and recurring/ad-hoc scan policies are accurate.

  • Reviews the scans to confirm correct, actionable data is generated to support the patching activities.

• For endpoint security, works with the team to perform the following duties:

  • Ensures new hosts go through the applicable learning phase before going live.

  • Ensures all hosts can be seen in the endpoint security application with ongoing monitoring and applicable policies applied.

• For insider threat monitoring, works with the team to administer the security application and monitor aggregated data.

• Designs, develops, tests, and evaluates information system security throughout the systems development life cycle.

WHAT YOU’LL NEED TO SUCCEED - REQUIRED :

• Clearance: Active Top Secret security clearance with SCI eligibility

• Education: BA/BS or similar Degree, OR equivalent experience in lieu of degree

• Experience: Minimum of 10 years of experience in supporting US government systems, emphasis on DO

• Technical Skills: Experience with using or maintaining 2 or more of the cyber tools listed below, AND the ability to quickly learn those that are unfamiliar:

  • Splunk

  • Tenable.sc

  • Trellix

  • Teramind

• Skills & Abilities: Excellent communication and interpersonal skills, with the ability to work effectively in a fast-paced, collaborative environment.

• Location : McLean, VA - onsite at customer location

DESIRED SKILLS:

• Certifications that meet applicable 8140 compliance, including but not limited to Security+ CE

• Proficiency in Google Workspace and related tools

GDIT IS YOUR PLACE:

• 401K with company match

• Comprehensive health and wellness packages

• Internal mobility team dedicated to helping you own your career

• Professional growth opportunities including paid education and certifications

• Cutting-edge technology you can learn from

• Rest and recharge with paid vacation and holidays

#GDITcareers

#OpportunityOwned

#WeAreGDIT

#transitioningmilitary

#clearedjobs

#veterans

Work Requirements

Years of Experience

10 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

CompTIA Security+ CE | CompTIA - CompTIA

Travel Required

10-25%

Citizenship

U.S. Citizenship Required