Data Center Security Lead

General Dynamics Information Technology•Springfield, WA

4d•Hybrid

About The Position

GDIT is seeking a Data Center Security Lead for its Federal Civilian Division to support a large-scale, global Cloud and Data Center Services program for the U.S. Department of State’s Bureau of Diplomatic Technology. The role leads security operations across enterprise data centers and hybrid cloud platforms, protecting mission-critical systems and supporting their compliance and resilience. The work includes vulnerability scanning, patch management, endpoint detection and response, Zero Trust enforcement, ATO lifecycle management, audit preparation, access control governance, and integration with Security Operations Center tools and processes. The Lead oversees vulnerability scanning and remediation, patch cycles, endpoint security platforms, SIEM telemetry, and security controls. The role implements Zero Trust-aligned architecture and access governance; leads ATO readiness and maintenance; supports NIST RMF activities and compliance with federal standards, STIGs, FedRAMP, and DT policies; and oversees monitoring dashboards, scorecards, and security reporting. The Lead also coordinates with SOC and incident response teams, collaborates with engineering and operations stakeholders, produces operational and training documentation, and leads security modernization initiatives. The position is hybrid in the National Capital Region, with periodic travel to customer and data center sites. The listed work locations are Washington, DC, Newington, VA, and Springfield, VA. The scheduled work week is 40 hours, and travel is less than 10%.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or Engineering.
At least 8 years of relevant experience supporting enterprise cybersecurity operations, vulnerability management, patching, monitoring, or endpoint protection.
Demonstrated experience working in data center environments with hybrid infrastructure and multi-platform security responsibilities.
CompTIA Security+, CISSP, or CISM certification.
Strong expertise with Tripwire, Cortex (XDR), SIEM platforms, and Archangel security/risk management.
Deep understanding of vulnerability scanning tools such as Tenable/Nessus and Qualys, patch management workflows, endpoint protection technologies, security control baselines, and STIGs.
Familiarity with Zero Trust principles, ATO documentation packages, NIST RMF, FedRAMP, and federal cybersecurity requirements.
Experience securing hybrid infrastructure, including VMware, NetApp, Windows/Linux servers, network devices, and public cloud services.
Active Top Secret clearance; U.S. citizenship is required.

Nice To Haves

Master’s degree in Information Technology, Cybersecurity, Computer Science, or Engineering.

Responsibilities

Lead enterprise vulnerability scanning operations, including policy configuration, scan execution, triage, and remediation coordination across DT-managed systems.
Oversee patch management cycles for Windows, Linux, network appliances, and hypervisors, ensuring timely compliance with DT security directives.
Manage vulnerability remediation workflows, POA&Ms, patch exception requests, and risk reporting to DT cybersecurity leadership.
Oversee endpoint security platforms, including Cortex XDR and Tripwire, and ensure accurate detection and policy enforcement.
Integrate alerts, logs, and telemetry into enterprise SIEM platforms for correlation, analytics, and operational response.
Monitor and tune security controls to reduce false positives and improve visibility across data centers and cloud workloads.
Implement and maintain Zero Trust-aligned security architecture across data center and hybrid cloud environments.
Oversee access control policies, privileged access workflows, multifactor authentication enforcement, least-privilege reviews, and secure onboarding and offboarding procedures.
Ensure accurate and auditable access records across virtualization, storage, network, and cloud platforms.
Lead ATO readiness and maintenance by managing documentation, security control inheritance, SSP updates, and audit evidence coordination.
Support NIST RMF activities, including categorization, control implementation, control assessments, and continuous monitoring.
Maintain alignment with federal cybersecurity standards, STIGs, FedRAMP, and DT security policies.
Oversee continuous monitoring dashboards, compliance scorecards, vulnerability trend reports, patch compliance metrics, and EDR effectiveness reporting.
Collaborate with SOC analysts and DT leadership to report on threat posture, gaps, and recommended improvements.
Support integration and optimization of security telemetry from Tripwire, Cortex, SIEM platforms, and Archangel.
Collaborate with the SOC, incident response teams, and system owners during incident investigations, containment, eradication, and recovery.
Provide technical leadership for incident root-cause analysis, corrective action plans, and long-term control improvements.
Partner with engineering teams, data center operations, cloud service engineers, system owners, and DT cybersecurity leadership to ensure security coverage.
Produce playbooks, SOPs, hardening guides, user access documentation, and technical training content for Government FTEs and support contractors.
Lead security modernization projects, pilots, tool evaluations, and capability uplift initiatives.

Benefits

Comprehensive benefits and wellness packages.
401(k) with company match.
Competitive pay.
Paid time off, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Medical plan options, including some with Health Savings Accounts.
Dental plan options.
Vision plan.
Short- and long-term disability benefits.
Life insurance, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
Full-flex work weeks where possible.
AI-powered career tool identifying career steps and learning opportunities.
Internal mobility team focused on career goals.