Type of Requisition:Regular
Clearance Level Must Currently Possess:None
Clearance Level Must Be Able to Obtain:None
Public Trust/Other Required:None
Job Family:Cyber and IT Risk Management
Job Qualifications:Skills:Cyber Defense, Information System Security, NIST Standards, Security Risk, Vulnerability Management
Certifications:None
Experience:7 + years of related experience
ship Required:No
Job Description:Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program. The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States.
GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. The
Cyber Security Analyst SME will work as part of the CMM cloud engineering and security team, serving as the program's subject matter expert on information systems security and compliance across its Infrastructure and Application environments.
The CMM program maintains separate evidence mapping for Infrastructure and Application pipelines and mandates pipeline gating so that deployments cannot occur unless security criteria are met. The Cyber Security Analyst SME provides the day-to-day governance and evidence necessary to keep releases moving without compromising control integrity, while serving as the program's subject matter expert on Information Assurance (IA), Computer Network Defense (CND), and enterprise security strategy.
The
Cyber Security Analyst SME will execute the following responsibilities:
- Maintain separate security evidence mapping for Infrastructure and Application pipelines, ensuring artifacts satisfy required controls at each stage of the CI/CD process.
- Enforce pipeline gating criteria so that deployments cannot proceed to production unless required security evidence and approvals are in place.
- Perform, monitor, test, and troubleshoot hardware and software Information Assurance (IA) problems pertaining to the Computing Environment (CE), Network Environments (NE), Data Platforms (DP), and enclave environments.
- Collect and analyze data and events from Computer Network Defense (CND) tools such as system alerts, firewall, and network traffic logs, and host system logs.
- Assess and identify the systems and networks within the NE acceptable configurations and policies.
- Develop and manage security for more than one IT functional area (e.g., data, systems, network, and/or web) across the enterprise.
- Lead the development and implementation of security policies and procedures (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures, and use of firewalls and encryption routines).
- Brief and present status reports on security matters, developing security risk analysis scenarios and response procedures.
- Track and monitor software viruses and other malicious code across the environment.
- Lead the evaluation of products and/or procedures to enhance productivity and effectiveness.
- Provide direct support to the business and IT staff for security-related issues.
- Partner with DevSecOps, engineering, and governance teams to integrate security and compliance requirements into the release and deployment process.
QUALIFICATIONS- BS/BA degree with 7+ years of experience of general experience in information systems providing project leadership monitoring computer networks and security issues and investigating and resolving security and cybersecurity incidents.
- Experience documenting security incidents and performing security vulnerability assessments.
- Experience working with Agile teams and SAFe to perform testing and uncover system and network vulnerabilities.
- Experience may be considered in lieu of degree.
- Strong working experience in AWS Cloud Security (certification preferred); 3+ years' experience.
- Prior ATO experience in an AWS environment for a large agency; 4+ years' experience.
- Solid understanding of NIST Standards.
- Prior experience with the ATO process, FedRAMP, CIS, and ISO 27001 (4+ years).
- Solid understanding of ICAM, SIEM, and vulnerability management tools.
- Experience with CSAM or similar tools.
- Familiarity with data governance, metadata management, and data quality practices.
- Experience with SQL for data querying and validation.
- Proficiency with BI/reporting tools such as Power BI, Tableau, or QuickSight.
- Familiarity with statistical analysis tools/techniques (e.g., Excel, R, Python) preferred.
- Experience with cloud data platforms (Snowflake, Databricks, AWS preferred).
- Understanding of data architecture concepts (data lake, lakehouse, warehouse).
- Strong analytical, problem-solving, & statistical analysis skills with attention to detail and data accuracy.
- Preferred: Certified Information Systems Security Professional (CISSP).
COMMUNICATION & ORGANIZATIONAL- Excellent presentation and communication (oral and written) skills.
- Consultant mindset with the ability to work with high level customer stakeholders and build excellent customer relationships.
- Experience identifying and applying industry tools, solutions, methods best practices, and emerging technologies.
- Strong analytical skills and problem-solving skills with the ability to formulate and communicate recommendations for improvement.
- Demonstrated ability to work effectively, independently, and as part of a team.
- Strong communication skills, with the ability to translate technical security findings into risk-based guidance for stakeholders and program leadership.
The likely salary range for this position is $127,500 - $172,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:40
Travel Required:None
Telecommuting Options:Remote
Work Location:Any Location / Remote
Additional Work Locations:Total Rewards at GDIT:Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. GDIT typically provides new employees with 15 days of paid leave per calendar year to be used for vacations, personal business, and illness and an additional 10 paid holidays per year. Paid leave and paid holidays are prorated based on the employee's date of hire. The GDIT Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
Our Identity Verification Process:As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work:We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at
gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
Never miss an opportunity! Create an alert based on the job you applied for.
