Cybersecurity Architect

General Dynamics Information Technology•USA VA Home Office (VAHOME), VA

13h•$149,469 - $184,000•Remote

About The Position

GDIT is the leading systems integrator in the Zero Trust Defense sector market—developing and delivering innovative solutions to government customers. Our Zero Trust business continues experiencing rapid growth, and this is an opportunity to join our team and be a part of creating Cybersecurity solutions that make a real impact. As a Cyber Security Architect on an Enterprise Zero Trust Program for a DoD client, your responsibilities will include: Develop and implement long-term cybersecurity strategies and plans, ensuring alignment with business goals and regulatory requirements. Leading RMF efforts for a large distributed system in order to obtain an ATO Identify, analyze, and assess security risks, developing and implementing mitigation strategies. Create and enforce security policies, procedures, and guidelines to ensure compliance and maintain a secure environment. Support incident response efforts, including detection, containment, eradication, and recovery, in the event of security breaches or incidents. Support vulnerability assessments, penetration testing, and other security tests to identify weaknesses and vulnerabilities in systems and networks. Collaborate with other IT professionals, business stakeholders, and external vendors to ensure security requirements are met. Remain up to date on the latest cybersecurity threats, technologies, and best practices. Provide guidance and mentoring to junior security professionals and trains employees on security best practices. Interface with government customer to present program cyber risks.

Requirements

Understanding of security principles involved in Zero Trust Network Architecture and tools required to implement it
Understanding of how networks function, including protocols, devices, and security measures like firewalls and VLANs.
Knowledge of data protection methods, including encryption, pseudonymization, and data masking.
Understanding of risk assessment, analysis, and mitigation techniques.
Skills in identifying, analyzing, and responding to security incidents.
Ability to analyze problems, troubleshoot security issues, and develop effective solutions.
Capacity to learn and adapt to new technologies and evolving threats.
Ability to clearly explain complex technical concepts to both technical and non-technical audiences.
Ability to work effectively with other teams and stakeholders.
Detail oriented.
5-10 years of experience in IT security and IT risk management is recommended.
Current Secret clearance.
DoD 8570 IAT Level III certification.
Advanced IT security certifications (like CISSP, CEH, GIAC).
Bachelor’s degree in field like Computer Science, Information Technology, or a related field.
Strong foundation in information security frameworks and IT risk management practices.
Expertise in DoD RMF Controls and how to correlate the various aspects of the systems, networks, and applications to ensure controls are closed and/or mitigated, and documented in furtherance of obtaining ATO
Expertise in security audits, compliance requirements, and regulatory standards.
Deep understanding of enterprise architecture principles and how to integrate security into the overall IT landscape.
Knowledge of secure coding practices, vulnerability assessment, and penetration testing.
Knowledge of common operating systems (Windows, Linux, Unix) and their security configurations.
Proficiency in various zero trust security tools and technologies, such as intrusion detection systems, data loss prevention (DLP) solutions, identity and access management (IAM) systems, firewalls, and ZTNA.

Responsibilities

Develop and implement long-term cybersecurity strategies and plans, ensuring alignment with business goals and regulatory requirements.
Leading RMF efforts for a large distributed system in order to obtain an ATO
Identify, analyze, and assess security risks, developing and implementing mitigation strategies.
Create and enforce security policies, procedures, and guidelines to ensure compliance and maintain a secure environment.
Support incident response efforts, including detection, containment, eradication, and recovery, in the event of security breaches or incidents.
Support vulnerability assessments, penetration testing, and other security tests to identify weaknesses and vulnerabilities in systems and networks.
Collaborate with other IT professionals, business stakeholders, and external vendors to ensure security requirements are met.
Remain up to date on the latest cybersecurity threats, technologies, and best practices.
Provide guidance and mentoring to junior security professionals and trains employees on security best practices.
Interface with government customer to present program cyber risks.

Benefits

Full-flex work week
401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from
Rest and recharge with paid vacation and holidays
Variety of medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
Full flex work weeks where possible
Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
15 days of paid leave per calendar year to be used for vacations, personal business, and illness
10 paid holidays per year
Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees.
Short and long-term disability benefits
Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.