Cybersecurity Analyst SME

General Dynamics Information Technology•Alexandria, VA

1d•$169,604 - $229,464•Onsite

About The Position

GDIT is seeking a Security Operations Center Manager to help support the Defense Manpower Data Center (DMDC) Cybersecurity, Privacy, Records, Information Management, and Environments Support (Cyber Primes) program As a Security Operations Center (SOC) Manager, you will be part of a team who is responsible for securing the operations for DMDC and DHRA’s networks via the SOC. The SOC is the central hub of cybersecurity event monitoring, focused on incident detection, triage, and analysis with the objective of providing continuous monitoring and event analysis to quickly identify security concerns/incidents in a timely manner. The SOC team is responsible for monitoring, triage, and analysis of all security alerts, along with escalation to Incident Response within the DHRA area of responsibility. Cyber events are triggered 24-hours a day, 7-days a week, 365-days a year (24x7x365). MEANINGFUL WORK AND PERSONAL IMPACT: As a SOC Manager, you will contribute to a fast-paced team and be responsible for the SOC. We are seeking a highly experienced and knowledgeable SOC Manager to support our Department of War (DOW) contracts. The ideal candidate will possess extensive expertise in cybersecurity, threat detection, incident response, and compliance within federal government environments. WHAT YOU’LL NEED TO SUCCEED - REQUIRED: Bring your expertise along with a drive for innovation to GDIT.

Requirements

US Citizenship required for contract
One of the following certification from the following: CCNA, CySA+, CFR, GCFA, GCIA, or GICSP
Bachelor’s degree or experience in lieu of education in Cybersecurity, Information Technology, Computer Science, or a related field.
10+ years of experience in cybersecurity
Active DOW Top Secret Clearance
Continuous Monitoring
Security Information and Event Management (SIEM)
Security Operations

Nice To Haves

Security+
CISSP

Responsibilities

May serve as a team or task lead
May coach and provide guidance to less experienced professionals
Investigates, analyzes, and responds to cyber incidents within a network environment or enclave
Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purpose of mitigating threats
Interprets, analyzes, and reports all events and anomalies in accordance with computer network directives, including initiating, responding, and reporting discovered events
Evaluates, tests, recommends, coordinates, monitors, and maintains cybersecurity policies, procedures, and systems, including access management for hardware, firmware, and software
Ensures that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with cybersecurity standards
Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security
Develop techniques and procedures for conducting cybersecurity risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks
Develop and maintain Tactics, Techniques and Procedures (TTPs) for the SOC
Maintain and provide process improvements on SOC processes and procedures
Manage Cyber Incidents which includes triage, communication, documenting and responding to the incident in accordance with DoW regulations and policies.
Communicate and provide summaries which can include presentations to all levels of leadership
Manage tasks in accordance with DoW government contracts