Cyber Security Project Engineer - TS/SCI w/Polygraph
About The Position
GDIT is hiring a Cyber Security Project Engineer to support customer activities and provide cyber security services across enterprise and cloud environments. The role focuses on identifying, analyzing, and responding to security incidents through intrusion analysis, forensic collection, malware investigation, and coordination with cyber defense teams. The engineer contributes to a cyber security risk management service and helps ensure operational IT capabilities deliver timely, accurate, and secure information. The position is located onsite at a customer site in McLean, Virginia. It requires an active TS/SCI clearance with polygraph, U.S. citizenship, a bachelor’s degree in a relevant discipline, and at least eight years of related experience. One listed cybersecurity certification is required. The scheduled workweek is 40 hours, with less than 10% travel required.
Requirements
- U.S. citizenship is required.
- An active TS/SCI clearance with polygraph is required; no additional clearance can be obtained.
- At least 8 years of related experience.
- A bachelor’s degree in computer engineering, computer science, electrical engineering, information systems, information technology, cybersecurity, or a closely related discipline.
- Knowledge of incident response methodologies, categories, and timelines, and cyber defense policies and procedures.
- Ability to perform damage assessments and determine remediation paths.
- Knowledge of intrusion detection methodologies for host and network environments and experience using security event correlation tools.
- Understanding of attack classes, attack stages, and adversary behaviors.
- Knowledge of malware analysis concepts and containment techniques, including the ability to identify, capture, contain, and report malware.
- Ability to recognize and categorize vulnerabilities and associated attacks.
- Knowledge of network security architecture, topology, and communication principles; network protocols including TCP/IP, DHCP, DNS, and directory services; network services and secure communications.
- Knowledge of system administration, OS hardening, and application security threats.
- Understanding of cloud service models and their effects on incident response capabilities.
- At least one of the listed certifications: CEH(P, ECIH, GRID, RCCE Level 1, CBROPS, CCSP, CEH, Cloud+, FITSP-O, GCED, GCIH, GSEC, PenTest+, or Security+.
Nice To Haves
- Board certification in relevant security programs, such as CISSP, CISM, CISA, CEH, NCSF, or CAP.
- Professional certifications in Amazon or Microsoft Azure cloud technologies.
- Understanding of FISMA.
Responsibilities
- Lead and support enterprise-wide incident response activities.
- Coordinate incident response functions within cloud environments.
- Produce after-action reviews and incident reports for technical and non-technical audiences.
- Collect and analyze intrusion artifacts to support mitigation efforts.
- Receive, triage, and investigate network alerts from multiple sources.
- Monitor external threat intelligence to assess potential enterprise impact.
- Perform cyber defense trend analysis and reporting.
- Conduct initial, forensically sound image collection and analysis.
- Preserve evidence integrity in accordance with standards and procedures.
- Develop and publish cyber defense techniques, guidance, and incident findings.
- Contribute to enterprise knowledge bases and security best practices.
Benefits
- 401(k) with company match.
- Medical plan options, including plans with Health Savings Accounts.
- Dental plan options.
- Vision plan.
- Paid vacation and holidays.
- Paid education and certifications.
- Internal mobility support and professional growth opportunities.
- Paid time off plans including vacation, sick and personal time, paid parental, military, bereavement, and jury duty leave.
- Short- and long-term disability benefits.
- Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
- Full flex work weeks where possible.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
