GDIT is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day.

We think. We act. We deliver. There is no challenge we can't turn into opportunity. And our work depends on a Cyber Security Analyst Senior Advisor joining our team to support the technical infrastructure of Security Operations Center (SOC) team of security analysts and incident responders and providing technical guidance and support.

The Cyber Security Analyst Senior Advisor is responsible for supporting the technical infrastructure of the Security Operations Center (SOC) and a team of security analysts and incident responders and providing technical guidance and support for the network infrastructure.

IN THIS ROLE, A TYPICAL DAY WILL INCLUDE:

• The primary duty of the Senior Cyber Security Engineer is to support the SOC engineering and administration efforts
• Responsible for ensuring uptime for resources such as ArcSight data feeds, alerts and logs from firewalls, routers, and other network devices or hosts, data feeds and/or alerts from CISCO FirePower
• Providing high level of consistency in ensuring the security posture of the network and the SOC infrastructure
• Staying on top of current security technologies and developments in the security field and relate them to the network and Applications.

REQUIRED QUALIFICATIONS:

• Bachelor's degree in Computer Science or related discipline
• 10+ years of experience in security/network/systems engineering
• In lieu of degree, 14 years of related experience is required
• At least one Vendor or GIAC certifications
• Ability to Obtain and Maintain an Active Secret Clearance

Successful candidates will have:

• Preference will be given to candidates who have technical abilities in Cloud Infrastructure (Oracle, Azure Gov, AWS Gov, and Security in the cloud, Linux Administration, Zeek, CISCO FIREPower Defense Center (IDS/IPS), F5 BigIP/ASM module, ArcSight Use Case and Content development, API scripting, Full packet capture, Carbon Black, Nessus, SentinelOne, Digital Guardian, REGEX, PowerShell, Lamda, Python Scripting.Deep understanding of networking, storage, and operating system technologies
• Experience installing and configuring Windows and Linux servers to comply with CIS benchmarks
• Data Lake Infrastructure
• Able to learn new products, create documentation, present, and implement security products to a large Enterprise, and document to high standards able to pass audit scrutiny.
• Strong working knowledge of various security technologies, architecture, networking, engineering, and administration
• Working knowledge of incident response and analysis
• Strong experience with working in Windows LDAP/AD environments, Linux administration, technical documentation, and communicating technical information to leadership
• Working knowledge of firewalls and VPNs, IDS/IPS, site blocking and content filtering tools
• Working within a cyber operations or network defense operations environment
• Hands-On experience with SIEM engineering/administration