Lead Security Engineer

Job Description Summary:

At GDIT we build cutting-edge applications that help the end user accomplish their mission. GDIT is your place. You make it your own. Bring your creativity to help us find simple solutions to complex problems. By owning your opportunity at GDIT, you’ll play an essential part in preparing our nation for the

future.

HOW YOU WILL MAKE A DIFFERENCE:

Ensuring security technologies align and meet requirements.Coordinate IT security engineering activities and program resourcesEsure solutions meet the security architecture, and security design, and do not introduce risk.Work with the Information Security Manager, technical and not technical staff, customers and corporate advisory boards to provide technical consultation and escalate or resolve security related issues.Design IT and Cyber Security solutions as required, and act as technical / engineering lead for implementation of the solutions

Required Education and Experience: Bachelor’s Degree in technology, engineering, business, or a related technical discipline and 15+ years of experience.

Required skills and demonstrated experience:

Demonstrated experience using Splunk to ingest and analyze network dataDemonstrated experience in network vulnerability analysis and penetration testing with both open-source and commercial toolsDemonstrated experience providing in-depth holistic analysis of a technical threat to critical infrastructure by leveraging various data sourcesExperience with  audit records are collected and reviewed IAW ICS 500-27, Collection and Sharing of Audit DataDemonstrated experience with the current infrastructure, business processes, policy, and adversary capabilities is key to producing accurate risk assessmentsDemonstrated experience working complex data analysis, experience with analytical assessments of operational and technical dataDemonstrated experience with multiple operating systems such as Windows, Linux, and Mac OSXDemonstrated experience with programming skills with scripting languages such as Perl, PowerShell, Python, and BashDemonstrated experience with system kernel level processing to detect and report on significant kernel events such as root kits, hooked functions, call tables, and data structuresDemonstrated experience performing documented user requirements and directing or assisting in the design of test plans in support of user requirements for software or IT systemsDemonstrated experience with analytics, writing, and briefing skills.Demonstrated experience distilling information into documented and sourced products.Demonstrated experience in analysis, targeting, or investigations.Demonstrated experience with data identification, reduction, and analysis to detect suspicious data types, modified software and/or other malicious contentDemonstrated experience collaborating with multiple teams to accomplish objectives.Demonstrated experience with attention to detail, strong organizational skills, and the ability to independently manage and prioritize multiple tasks to ensure deadlines are met

One or more of the following certifications is preferred

Certified Information Systems Security Professional (CISSP)Cisco Certified Network Associate (CCNA)Cisco Certified Network Professional (CCNP)Splunk Engineering Certification TrainingCertified Ethical Hacker (CEH)ISACA Certified Information Security ManagerCCNA Cyber OpsCompTIA Security+ CE [10/2026]

Other skills and demonstrated experiences that are highly desired but not mandatory to perform the work, include:

Demonstrated on-the-job experience with collaboration and outreach across multiple customer environments such as IT, Cyber, Security, and OperationalDemonstrated experience working with virtualization software and virtualized environments such as ESXi, VMWare, VirtualBox, and Hyper-VDemonstrated experience with both static and dynamic malware analysis and the ability to conduct analysis of identified malicious software and codeDemonstrated experience working with debuggers and disassemblers such as OllyDbg, WinDbg, IDA Pro, and Binary NinjaDemonstrated experience working closely and collegiately with Sponsor mission partnersDemonstrated experience with fostering and facilitating strategic partnerships across organizational boundaries to positively impact deliveryDemonstrated experience communicating complex technical topics to a non-technical audienceDemonstrated experience distilling complex issues into succinct problems, to recommend and impact solutions

Location: Hybrid or Remote with travel to Richmond, VA (expected to be on site up to 25%)

Timeline: This posting is contingent, for a future program that is expected to start between November 2024 and March 2025.

GDIT IS YOUR PLACE:
● Full-flex work week to own your priorities at work and at home
● 401K with company match
● Comprehensive health and wellness packages
● Internal mobility team dedicated to helping you own your career
● Professional growth opportunities including paid education and certifications
● Cutting-edge technology you can learn from
● Rest and recharge with paid vacation and holidays