Today
Secret
Unspecified
Unspecified
IT - Data Science
Remote/Hybrid• (Off-Site/Hybrid)
Own your career as a Cyber Security Analyst Sr. (Secure Data Networks) at GDIT. Here, you'll have the opportunity to build strong lines of cyber defense using cutting-edge technologies. Our work depends on the Cyber Security Analyst Sr. in support of SIEM focused programs.
HOW CYBER SECURITY ANALYST SENIOR WILL MAKE AN IMPACT:
WHAT YOU'LL NEED TO SUCCEED:
GDIT IS YOUR PLACE:
#OpportunityOwned #GDITCareers #WeAreGDIT #CompanyWithASoul
Work Requirements
HOW CYBER SECURITY ANALYST SENIOR WILL MAKE AN IMPACT:
- Lead end-to-end vulnerability management program including discovery, assessment, prioritization, remediation, verification, and metrics reporting.
- Own compliance mapping and control design across frameworks and ensure evidence readiness for audits.
- Manage risk-based remediation planning, MTTR targets, and risk acceptance processes; drive reductions in residual risk.
- Lead security control design and policy development; translate regulatory requirements into concrete controls, procedures, and test plans.
- Oversee audit activities (internal/external), coordinate evidence collection, and respond to auditor inquiries.
- Mentor and coach less experienced analysts; provide guidance on complex findings and remediation strategies.
- Collaborate with IT, security operations, privacy, legal/compliance, and business units to implement controls and remediation timelines.
- Manage or participate in third-party/vendor security assessments as needed.
- Report program status to senior leadership; develop and maintain dashboards, KPIs, and risk heat maps.
- Stay current with regulatory changes and emerging threats; adjust programs accordingly
WHAT YOU'LL NEED TO SUCCEED:
- The position requires an active SECRET security clearance
- The position requires seven (7+) years of relevant experience in vulnerability management, information security, or compliance/risk.
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent work experience
- Deep experience with vulnerability management lifecycle; proficient with scanners (Nessus, Qualys, OpenVAS) and remediation tracking.
- Strong knowledge of configuration baselines and hardening standards (CIS, STIGs); experience with IaC and secure SDLC concepts.
- Cloud security experience and ability to integrate vulnerability/compliance controls in cloud environments.
- Familiarity with governance, risk, and compliance frameworks (NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls) and control mapping.
- SIEM and log analytics understanding; basic incident response coordination.
- Experience with GRC tools (RSA Archer, ServiceNow GRC, MetricStream) and audit evidence management.
- Ability to lead cross-functional initiatives and manage multiple stakeholders.
- Strong mentoring, coaching, and team-building skills.
- Excellent written and verbal communication; ability to present complex findings to executives and non-technical stakeholders.
- Strong analytical mindset with data-driven decision making.
- Preferred Certifications; CISSP, CISM, CISA, GIAC (GSEC, GCNA, GSNA), CCSP, CRISC, or equivalent.
- Remote / Washington, D.C. (the position may be transitioned to ON-SITE in D.C.).
- This work is anticipated to start anytime between September 2025 and March 2026
- US Citizenship Require
GDIT IS YOUR PLACE:
- Full-flex work week to own your priorities at work and at home
- 401K with company match
- Comprehensive health and wellness packages
- Internal mobility team dedicated to helping you own your career
- Professional growth opportunities including paid education and certifications
- Cutting-edge technology you can learn from
- Rest and recharge with paid vacation and holidays
#OpportunityOwned #GDITCareers #WeAreGDIT #CompanyWithASoul
Work Requirements
group id: 90979310
Explore the Art of the Possible | GDIT