Polygraph

General Dynamics Information Technology•McLean, VA

1d•Onsite

About The Position

GDIT is hiring a Cyber Security Project Engineer to support customer activities and provide cyber security services. The role focuses on identifying, analyzing, and responding to security incidents across enterprise and cloud environments, including intrusion analysis, forensic collection, malware investigation, and coordination with cyber defense teams to mitigate threats and strengthen the organization’s security posture. The position is onsite at the customer location in McLean, Virginia, and requires an active TS/SCI clearance with polygraph. The role is scheduled for 40 hours per week, with less than 10% travel.

Requirements

Bachelor’s degree in computer engineering, computer science, electrical engineering, information systems, information technology, cybersecurity, or a closely related discipline.
At least 8 years of related experience.
U.S. citizenship required.
Must currently possess an active Top Secret SCI clearance with polygraph.
Knowledge of incident response methodologies, categories, timelines, cyber defense policies, and procedures.
Ability to perform damage assessments and determine remediation paths.
Knowledge of host and network intrusion detection methodologies and experience using security event correlation tools.
Understanding of attack classes, attack stages, and adversary behaviors.
Knowledge of malware analysis concepts and containment techniques; ability to identify, capture, contain, and report malware.
Ability to recognize and categorize vulnerabilities and associated attacks.
Knowledge of network security architecture, topology, communication principles, and protocols including TCP/IP, DHCP, DNS, and directory services.
Familiarity with network services, interactions, and secure communications.
Knowledge of system administration, operating system hardening, and application security threats.
Understanding of cloud service models and how they affect incident response capabilities.
At least one required certification: CEH(P), ECIH, GRID, RCCE Level 1, CBROPS, CCSP, CEH, Cloud+, FITSP-O, GCED, GCIH, GSEC, PenTest+, or Security+.

Nice To Haves

Board certification in a relevant security program, such as CISSP, CISM, CISA, CEH, NCSF, or CAP.
Professional certifications in Amazon or Microsoft Azure cloud technologies.
Understanding of FISMA.

Responsibilities

Lead and support enterprise-wide incident response activities.
Coordinate incident response functions within cloud environments.
Produce after-action reviews and incident reports for technical and non-technical audiences.
Collect and analyze intrusion artifacts to support mitigation efforts.
Receive, triage, and investigate network alerts from multiple sources.
Monitor external threat intelligence to assess potential enterprise impact.
Perform cyber defense trend analysis and reporting.
Conduct initial, forensically sound image collection and analysis.
Preserve evidence integrity in accordance with standards and procedures.
Develop and publish cyber defense techniques, guidance, and incident findings.
Contribute to enterprise knowledge bases and security best practices.

Benefits

401(k) with company match.
Medical plan options, including options with Health Savings Accounts.
Dental plan options.
Vision plan.
Paid education and certifications.
Professional growth opportunities.
Paid vacation and holidays.
Flexible work weeks where possible.
Paid time off plans including vacation, sick and personal time.
Paid parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life insurance and other insurance offerings, including accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.