Type of Requisition:
Regular
Clearance Level Must Currently Possess:
Secret
Clearance Level Must Be Able to Obtain:
Top Secret/SCI
Public Trust/Other Required:
None
Job Family:
Cyber and IT Risk Management
Job Qualifications:
Skills:
Accreditation Standards, Cyber Defense, Cyber Incident Response, Cyber Infrastructure, Cyber Risks Certifications:
None Experience:
4 + years of related experience US Citizenship Required:
Yes
Job Description:
CYBERSECURITY ANALYST
At GDIT, we are passionate about securing and supporting some of the most challenging government, defense, and intelligence missions. As part of our team, your work will have meaning and impact, helping to make today safer and tomorrow smarter. Join a culture that values autonomy, collaboration, and delivering your best every day.
GDIT has an opening for a CIRT Analyst. This position is part of an IT Service Management contract that includes the operation, modernization, expansion, and evolution of the program’s global IT services. These services span networking, compute, storage, infrastructure, cybersecurity, applications, hosting, and program management. The program operates within the ITIL framework to deliver high-quality IT services to the program, and this role is a critical part of ensuring the security and success of that mission.
MEANINGFUL WORK AND PERSONAL IMPACT
Lead / Manage / Support
Primary responsibility and the role’s impact on the mission
Perform triage of cyber incidents, identifying scope, urgency, and potential impact.
Manage, document, and track cyber defense incidents from detection to resolution.
Provide technical support for real-time cyber defense incident handling tasks.
Investigate and resolve cybersecurity incidents, ensuring rapid remediation and/or mitigation of cyber threats.
Demonstrate effectiveness through handling Red Team activity and investigation.
Provide on-call and after-hours support as needed to meet mission demands.
Prepare and conduct training courses related to incident response at least four times per calendar year.
Support efforts to maintain the customer’s CSSP (Cyber Security Service Provider) accreditation, including documentation and technical writing.
Update and maintain Incident Response tactics, techniques, procedures, and training documentation.
Collaborate
Describe interactions with the team to achieve the mission
Rapidly respond to time-sensitive security events and work collaboratively under tight deadlines.
Participate in cross-functional teams and meetings to improve cybersecurity posture.
Build trust, credibility, and strong working relationships with both customers and team members.
Exhibit a collaborative mindset with strong customer service skills.
Communicate clearly with both technical and non-technical stakeholders, ensuring shared understanding of incident status and risk.
Drive
Key outcomes + how the team innovates, resolves challenges, etc.
Proactively identify and recommend mitigations for vulnerabilities to strengthen the program’s cyber defense posture.
Collect and analyze network and/or host artifacts from various sources, including logs, system images, and packet captures, to characterize activity, determine root cause and operational impact, and enable rapid remediation.
Apply strong understanding of cybersecurity concepts, including mitigation strategies, root cause analysis, and Red Team operations, to improve incident response effectiveness.
Leverage attention to detail, problem-solving capabilities, and analytical thinking to resolve complex cyber incidents.
Demonstrate dependability, punctuality, and responsiveness to management while meeting mission-critical deadlines.
Utilize
Specific tools, skills or technologies in the role
Proficiency in collecting and analyzing logs, system images, packet captures, and other artifacts from various sources.
Familiarity with current cyber defense tools and technologies used for monitoring, detection, analysis, and response.
Strong organizational…