Job description

Type of Requisition: Regular Clearance Level Must Currently Possess: Secret Clearance Level Must Be Able to Obtain: Secret Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Job Qualifications: Skills: Security Controls, Security Policies, Security Standards, System Audits, Vulnerability Assessments Certifications: None Experience: 7 + years of related experience US Citizenship Required: Yes Job Description: Transform technology into opportunity as an Information Security Analyst Senior with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you’ll be at the forefront of innovation and play a meaningful part in improving how agencies operate. Responsible for coordinating the scanning and identification of vulnerabilities associated with hosts connected to the network. Maintains all tools that are used in the scanning and identification of vulnerabilities, as well as the tools used to rationalize, consolidate, and apply additional contextual information. Maintains a cooperative relationship with Engineering and Operations teams to drive remediation efforts. Responsibilities: Manages system vulnerabilities in accordance with security requirements utilizing NIST continuous monitoring standards, RMF critical security controls and counter measures based on risk assessments of mission systems. Identify and assess specific emergency or priority vulnerabilities, guided by input from other elements of the team such as cyber intelligence, engineering, or operations and suggest specific remediation approaches. Analyze vulnerability data and assist with the prioritization and remediation of the identified vulnerabilities commensurate to risk and vulnerability management standards. Understand vulnerabilities, their impacts, mitigation techniques, and document and articulate this understanding to various stakeholders. Update and develop security standards and templates as required to meet new regulatory/audit/etc. requirements and guidance Improve the efficacy and efficiency of specific VM practices across the enterprise, to include vulnerability identification/assessment/remediation. Leverage and enhance existing VM frameworks/policies/standards to ensure VM maintains a minimum of industry best practices. Coordinate collection of data and documentation in support of examinations/audits. Work with existing solution vendors (e.g., ACAS, HBSS) as necessary; identify potential solutions. Research, develop, implement, test and review information security in order to protect information and prevent unauthorized access. Responsible for gathering information necessary to maintain security and establish functioning external barriers such as firewalls and other security measures. Additionally, ISSOs assess and review systems in order to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades. Required Qualifications: BA/BS and 3 years of experience (additional years of experience will be considered in lieu of degree, 7 ) Experience and training with Microsoft Server 2016/ 2019 or newer to include Active Directory, Radius, DNS and Group Policy. Experience and training with virtual environments (VMware, Hyper-V, etc.) Familiar with maintaining and operating Trellix ENS (formerly McAfee Endpoint Security) and Tenable Security Center (ACAS) scans. Familiar with maintaining and operating SQL server. Experienced in applying patches/updates and STIGs. Possess and maintain a minimum of IAT level II certification IAW the DoW directive 8140.01 Cyberspace Workforce Management (sec , CCSP, CASP ) Secret clearance On Customer Site GDIT Is Your Place: 401K with company match Comprehensive health and wellness packages Internal mobility team dedicated to helping you own your career Professional growth opportunities including paid education and certifications Cutting-edge technology you can learn from Rest and recharge with paid vacation and holidays #GDITpriority The likely salary range for this position is $76,565 - $101,200. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: Less than 10% T elecommuting Options: Onsite Work Location: USA FL Tyndall AFB Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes. About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc . Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

Requirements

Must-haves

Cyber and IT Risk Management
Security Controls, Security Policies, Security Standards, System Audits, Vulnerability Assessments Certifications:
7 + years of related experience US Citizenship Required:
Manages system vulnerabilities in accordance with security requirements utilizing NIST continuous monitoring standards, RMF critical security controls and counter measures based on risk assessments of mission systems.
Identify and assess specific emergency or priority vulnerabilities, guided by input from other elements of the team such as cyber intelligence, engineering, or operations and suggest specific remediation approaches.
Analyze vulnerability data and assist with the prioritization and remediation of the identified vulnerabilities commensurate to risk and vulnerability management standards.
Understand vulnerabilities, their impacts, mitigation techniques, and document and articulate this understanding to various stakeholders.
Update and develop security standards and templates as required to meet new regulatory/audit/etc. requirements and guidance
Improve the efficacy and efficiency of specific VM practices across the enterprise, to include vulnerability identification/assessment/remediation.
Leverage and enhance existing VM frameworks/policies/standards to ensure VM maintains a minimum of industry best practices.
Coordinate collection of data and documentation in support of examinations/audits.
Work with existing solution vendors (e.g., ACAS, HBSS) as necessary; identify potential solutions.
Research, develop, implement, test and review information security in order to protect information and prevent unauthorized access.
Responsible for gathering information necessary to maintain security and establish functioning external barriers such as firewalls and other security measures.
Additionally, ISSOs assess and review systems in order to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades.
BA/BS and 3 years of experience (additional years of experience will be considered in lieu of degree, 7 )
Experience and training with Microsoft Server 2016/ 2019 or newer to include Active Directory, Radius, DNS and Group Policy.
Experience and training with virtual environments (VMware, Hyper-V, etc.)
Familiar with maintaining and operating Trellix ENS (formerly McAfee Endpoint Security) and Tenable Security Center (ACAS) scans.
Familiar with maintaining and operating SQL server.
Experienced in applying patches/updates and STIGs.
Possess and maintain a minimum of IAT level II certification IAW the DoW directive 8140.01 Cyberspace Workforce Management (sec , CCSP, CASP )
Secret clearance
On Customer Site

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

sqlrestai

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401k

401(K)

Paid Time Off

Wellness