Security Compliance Analyst

GDIT is a global technology and professional services company delivering technology solutions and mission services to government, defense, and intelligence organizations. The Security & Compliance Analyst supports the Case Management Modernization Program by managing cybersecurity, data privacy, compliance, vulnerability, monitoring, incident response, and governance activities across its cloud-based operational environment.

Responsibilities:

• Support analysis of systems, programs, and/or planning activities across the CMM operational environment
• Perform research in support of policies, procedures, and other technical documentation, and support analysis of IA/Cyber-related programs and initiatives
• Research and analyze options to develop relationships and solutions that resolve problems within the specialty area
• Analyze information assurance-related technical problems and provide engineering and technical support in solving them
• Design, develop, engineer, and implement solutions that meet network security requirements
• Perform vulnerability and risk analyses of computer systems and applications during all phases of the system development life cycle
• Establish and satisfy complex system-wide information security requirements based on the analysis of user, policy, regulatory, and resource demands
• Support customers in the development and implementation of security policies
• Provide 24/7 supplemental monitoring of the operational environment and escalate critical, service-impacting issues within 30 minutes
• Prepare monthly incident and problem management reports, ensuring operations remain compliant and responsive during and after releases
• Define data privacy, security, retention, and classification rules; manage data classification, sensitive data governance, and data sharing agreements
• Support Authority to Operate (ATO) documentation and gather supporting artifacts for ATO packages
• Monitor performance scans and system logs, analyzing and reporting vulnerabilities
• Investigate and analyze security issues and incidents, leveraging SIEM tools for monitoring and log analysis
• Maintain awareness of emerging security threats and modern attack methods to inform monitoring and response activities

Requirements:

• Cyber Risks, Security Compliance, Vulnerability Assessments, Vulnerability Management
• 5 + years of related experience
• No
• BS/BA degree with 5+ years of experience of general experience in information systems providing enterprise cybersecurity through policy, architecture, and training processes
• Experience developing plans to safeguard sensitive data against accidental or unauthorized modification, destruction, or disclosure
• Experience working with Agile teams and SAFe, responding to security assessments, and providing oversight of vulnerability audits and assessments
• Experience may be considered in lieu of degree
• Experience using tools to detect cloud-based security issues (1-2+ years' experience)
• Exposure to SIEM tools such as Splunk for monitoring and log analysis (1-2+ years' experience)
• Prior experience performing incident response and forensics (1-2+ years' experience)
• Knowledge of modern security methods, vulnerabilities, and emerging threats
• Experience with software and security testing, including containerized applications
• Understanding of data privacy, retention, and classification requirements in a regulated environment
• Familiarity with data governance, metadata management, and data quality practices
• Experience with SQL for data querying and validation
• Proficiency with BI/reporting tools such as Power BI, Tableau, or QuickSight
• Experience with cloud data platforms (Snowflake, Databricks, AWS preferred)
• Understanding of data architecture concepts (data lake, lakehouse, warehouse)
• Strong analytical, problem‑solving, & statistical analysis skills with attention to detail and data accuracy
• Excellent presentation and communication (oral and written) skills
• Consultant mindset with the ability to work with high level customer stakeholders and build excellent customer relationships
• Experience identifying and applying industry tools, solutions, methods best practices, and emerging technologies
• Strong analytical skills and problem-solving skills with the ability to formulate and communicate recommendations for improvement
• Demonstrated ability to work effectively, independently, and as part of a team
• Strong compliance mindset, with the ability to translate security and privacy requirements into clear governance guidance for stakeholders and leadership
• Familiarity with statistical analysis tools/techniques (e.g., Excel, R, Python) preferred
• Preferred: Certified Information Systems Security Professional (CISSP)