Cyber Security Analyst SME

GDIT is a global technology and professional services company delivering technology solutions and mission services to government, defense, and intelligence organizations. The Cyber Security Analyst SME serves as the subject matter expert for information systems security and compliance across cloud infrastructure and application environments, governing security evidence, pipeline gating, risk management, and security operations for the Case Management Modernization Program.

Responsibilities:

• Maintain separate security evidence mapping for Infrastructure and Application pipelines, ensuring artifacts satisfy required controls at each stage of the CI/CD process
• Enforce pipeline gating criteria so that deployments cannot proceed to production unless required security evidence and approvals are in place
• Perform, monitor, test, and troubleshoot hardware and software Information Assurance (IA) problems pertaining to the Computing Environment (CE), Network Environments (NE), Data Platforms (DP), and enclave environments
• Collect and analyze data and events from Computer Network Defense (CND) tools such as system alerts, firewall, and network traffic logs, and host system logs
• Assess and identify the systems and networks within the NE acceptable configurations and policies
• Develop and manage security for more than one IT functional area (e.g., data, systems, network, and/or web) across the enterprise
• Lead the development and implementation of security policies and procedures (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures, and use of firewalls and encryption routines)
• Brief and present status reports on security matters, developing security risk analysis scenarios and response procedures
• Track and monitor software viruses and other malicious code across the environment
• Lead the evaluation of products and/or procedures to enhance productivity and effectiveness
• Provide direct support to the business and IT staff for security-related issues
• Partner with DevSecOps, engineering, and governance teams to integrate security and compliance requirements into the release and deployment process

Requirements:

• Cyber Defense, Information System Security, NIST Standards, Security Risk, Vulnerability Management
• 7 + years of related experience
• BS/BA degree with 7+ years of experience of general experience in information systems providing project leadership monitoring computer networks and security issues and investigating and resolving security and cybersecurity incidents
• Experience documenting security incidents and performing security vulnerability assessments
• Experience working with Agile teams and SAFe to perform testing and uncover system and network vulnerabilities
• Experience may be considered in lieu of degree
• Strong working experience in AWS Cloud Security; 3+ years' experience
• Prior ATO experience in an AWS environment for a large agency; 4+ years' experience
• Solid understanding of NIST Standards
• Prior experience with the ATO process, FedRAMP, CIS, and ISO 27001 (4+ years)
• Solid understanding of ICAM, SIEM, and vulnerability management tools
• Experience with CSAM or similar tools
• Familiarity with data governance, metadata management, and data quality practices
• Experience with SQL for data querying and validation
• Proficiency with BI/reporting tools such as Power BI, Tableau, or QuickSight
• Experience with cloud data platforms (Snowflake, Databricks, AWS preferred)
• Understanding of data architecture concepts (data lake, lakehouse, warehouse)
• Strong analytical, problem‑solving, & statistical analysis skills with attention to detail and data accuracy
• Excellent presentation and communication (oral and written) skills
• Consultant mindset with the ability to work with high level customer stakeholders and build excellent customer relationships
• Experience identifying and applying industry tools, solutions, methods best practices, and emerging technologies
• Strong analytical skills and problem-solving skills with the ability to formulate and communicate recommendations for improvement
• Demonstrated ability to work effectively, independently, and as part of a team
• Strong communication skills, with the ability to translate technical security findings into risk-based guidance for stakeholders and program leadership
• Familiarity with statistical analysis tools/techniques (e.g., Excel, R, Python) preferred
• Preferred: Certified Information Systems Security Professional (CISSP)
• Strong working experience in AWS Cloud Security (certification preferred); 3+ years' experience