Cyber Incident Response Team (CIRT) Analyst - Requires TS/SCI Clearance

GD Information Technology•Fairview Park, OH

10d•$93,500 - $126,500•Onsite

About The Position

GDIT is hiring a Cyber Incident Response Team (CIRT) Analyst to support an IT Service Management contract covering the operation, modernization, expansion, and evolution of global IT services, including networking, compute, storage, infrastructure, cybersecurity, applications, hosting, and program management. The program uses the ITIL framework, and this role contributes to protecting the program’s mission and cybersecurity posture. The analyst handles cyber incidents from triage through resolution, provides technical support during real-time incident response, investigates threats, and supports remediation or mitigation. The position also supports Red Team activity, customer CSSP accreditation, and the development and maintenance of incident-response procedures and training materials. The analyst collaborates with customers and cross-functional teams, communicates incident status and risk, and recommends ways to strengthen cyber defenses. This is a full-time, onsite position in Falls Church, Virginia. The role requires an active TS/SCI clearance, U.S. citizenship, and at least four years of practical cyber incident response experience, particularly on DoW networks. On-call and after-hours support may be needed to meet mission demands. The role includes conducting incident-response training at least four times per calendar year.

Requirements

At least 4 years of practical experience with cyber incident response, especially on DoW networks.
Experience with digital forensics and analysis of network and host-based artifacts.
Active TS/SCI security clearance.
U.S. citizenship.
Bachelor’s degree in information technology, computer science, or a related technical discipline, or an equivalent combination of education, technical certifications or training, and work experience.
Possess baseline certification(s) sufficient to achieve at least DoW 8570.01-M Information Assurance Technical (IAT) Level II, such as CompTIA Security+ CE, before starting.
Obtain an additional computing environment certification within six months of hire, based on position designation.
When DoW 8140 requirements are implemented on the program or contract, conform to 8140 certification standards.
Ability to collect and analyze logs, system images, packet captures, and other artifacts from various sources.
Familiarity with cyber defense tools and technologies for monitoring, detection, analysis, and response.
Strong organizational skills to multitask, prioritize incidents, and meet tight deadlines.
Excellent oral and written communication skills for technical and non-technical audiences, including reports, briefings, and training materials.
Ability to work independently, adapt to fast-paced environments, and solve complex technical problems.
Strong analytical thinking, attention to detail, problem-solving ability, and customer service skills.

Responsibilities

Triage cyber incidents by determining their scope, urgency, and potential impact.
Manage, document, and track cyber defense incidents from detection through resolution.
Provide technical support for real-time cyber defense incident handling.
Investigate and resolve cybersecurity incidents and ensure rapid remediation or mitigation of threats.
Handle and investigate Red Team activity.
Provide on-call and after-hours support as needed to meet mission demands.
Prepare and conduct incident-response training courses at least four times per calendar year.
Support maintenance of the customer’s CSSP accreditation, including documentation and technical writing.
Update and maintain incident-response tactics, techniques, procedures, and training documentation.
Respond rapidly to time-sensitive security events and collaborate under tight deadlines.
Participate in cross-functional teams and meetings to improve cybersecurity posture.
Communicate incident status and risk clearly to technical and non-technical stakeholders.
Identify and recommend vulnerability mitigations to strengthen cyber defense.
Collect and analyze network and host artifacts, including logs, system images, and packet captures, to characterize activity, determine root cause and operational impact, and support rapid remediation.
Meet mission-critical deadlines and demonstrate dependability, punctuality, and responsiveness to management.

Benefits

Comprehensive benefits and wellness packages.
401(k) plan with company match.
Competitive pay.
Paid time off, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Medical plan options, including options with Health Savings Accounts.
Dental plan options.
Vision plan.
Full flex work weeks where possible.
Short- and long-term disability benefits.
Life insurance, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.