Cyber Incident Response Team (CIRT) Analyst - Requires TS/SCI Clearance
About The Position
GDIT is hiring a CIRT Analyst to support an IT Service Management contract covering the operation, modernization, expansion, and evolution of global IT services. The program’s services include networking, compute, storage, infrastructure, cybersecurity, applications, hosting, and program management, and are delivered within the ITIL framework. The analyst contributes to the security and success of the mission by handling cyber incidents, supporting real-time incident response, and helping maintain the customer’s CSSP accreditation. The role involves analyzing network and host artifacts, including logs, system images, and packet captures, to characterize activity, identify root cause and operational impact, and support rapid remediation. The analyst collaborates with customers and cross-functional teams, communicates incident status and risk to technical and non-technical stakeholders, and helps strengthen the program’s cyber defense posture. The position is full-time and onsite in Falls Church, Virginia. An active TS/SCI clearance is required. On-call and after-hours support may be needed to meet mission demands.
Requirements
- At least 4 years of practical experience with cyber incident response, especially on DoW networks.
- Experience with digital forensics and analysis of network and host-based artifacts.
- Bachelor’s degree in information technology, computer science, or a related technical discipline, or an equivalent combination of education, technical certifications or training, and work experience.
- Must possess baseline certification(s) meeting at least DoW 8570.01-M Information Assurance Technical (IAT) Level II requirements before starting; CompTIA Security+ CE is given as an example.
- Must obtain an additional computing environment certification within six months of hire, based on position designation; examples include CEH, CCNA-Security, and CND.
- Must have an active TS/SCI clearance.
- U.S. citizenship required.
- Ability to collect and analyze logs, system images, packet captures, and other artifacts from various sources.
- Familiarity with current cyber defense tools and technologies for monitoring, detection, analysis, and response.
- Strong organizational skills for multitasking, prioritizing incidents, and meeting tight deadlines.
- Excellent oral and written communication skills for technical and non-technical audiences, including reports, briefings, and training materials.
- Ability to work independently, adapt to fast-paced environments, and solve complex technical problems.
- Dependability, punctuality, responsiveness to management, and ability to meet mission-critical deadlines.
- When DoW 8140 requirements are implemented on the program or contract, employees must conform to 8140 certification standards.
Responsibilities
- Triage cyber incidents by identifying their scope, urgency, and potential impact.
- Manage, document, and track cyber defense incidents from detection through resolution.
- Provide technical support for real-time cyber defense incident handling.
- Investigate and resolve cybersecurity incidents to enable rapid remediation or mitigation of threats.
- Handle and investigate Red Team activity.
- Provide on-call and after-hours support as needed to meet mission demands.
- Prepare and conduct incident response training courses at least four times per calendar year.
- Support maintenance of the customer’s CSSP accreditation, including documentation and technical writing.
- Update and maintain incident response tactics, techniques, procedures, and training documentation.
- Respond rapidly to time-sensitive security events and collaborate under tight deadlines.
- Participate in cross-functional teams and meetings to improve cybersecurity posture.
- Communicate incident status and risk clearly to technical and non-technical stakeholders.
- Identify and recommend vulnerability mitigations to strengthen the program’s cyber defense posture.
- Collect and analyze network and host artifacts from sources such as logs, system images, and packet captures to characterize activity, determine root cause and operational impact, and support rapid remediation.
- Apply cybersecurity concepts, mitigation strategies, root cause analysis, and Red Team operations to improve incident response effectiveness.
- Prioritize incidents, multitask, and meet mission-critical deadlines.
Benefits
- Comprehensive benefits and wellness packages.
- 401(k) plan with company match.
- Competitive pay and paid time off.
- Medical plan options, including options with Health Savings Accounts.
- Dental plan options.
- Vision plan.
- Full flex work weeks where possible.
- Paid time off plans including vacation, sick and personal time, holidays, paid parental leave, military leave, bereavement leave, and jury duty leave.
- Short- and long-term disability benefits.
- Life insurance and other insurance offerings, including accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
- Career growth support, including an AI-powered career tool and an internal mobility team.
- Award-winning culture of innovation and a military-friendly workplace.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
