Cyber Security Analyst SME

Type of Requisition:
Regular
Clearance Level Must Currently Possess:
None
Clearance Level Must Be Able to Obtain:
None Public Trust/Other Required:
None
Job Family:
Cyber and IT Risk Management Job Qualifications:
Skills:
Cyber Defense, Information System Security, NIST Standards, Security Risk, Vulnerability Management Certifications:
None Experience:
7 + years of related experience US Citizenship Required:
No
Job Description:

Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program. The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States.

GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. The Cyber Security Analyst SME will work as part of the CMM cloud engineering and security team, serving as the program's subject matter expert on information systems security and compliance across its Infrastructure and Application environments.

The CMM program maintains separate evidence mapping for Infrastructure and Application pipelines and mandates pipeline gating so that deployments cannot occur unless security criteria are met. The Cyber Security Analyst SME provides the day-to-day governance and evidence necessary to keep releases moving without compromising control integrity, while serving as the program's subject matter expert on Information Assurance (IA), Computer Network Defense (CND), and enterprise security strategy.

The Cyber Security Analyst SME will execute the following responsibilities:

- Maintain separate security evidence mapping for Infrastructure and Application pipelines, ensuring artifacts satisfy required controls at each stage of the CI/CD process.

- Enforce pipeline gating criteria so that deployments cannot proceed to production unless required security evidence and approvals are in place.

- Perform, monitor, test, and troubleshoot hardware and software Information Assurance (IA) problems pertaining to the Computing Environment (CE), Network Environments (NE), Data Platforms (DP), and enclave environments.

- Collect and analyze data and events from Computer Network Defense (CND) tools such as system alerts, firewall, and network traffic logs, and host system logs.

- Assess and identify the systems and networks within the NE acceptable configurations and policies.

- Develop and manage security for more than one IT functional area (e.g., data, systems, network, and/or web) across the enterprise.

- Lead the development and implementation of security policies and procedures (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures, and use of firewalls and encryption routines).

- Brief and present status reports on security matters, developing security risk analysis scenarios and response procedures.

- Track and monitor software viruses and other malicious code across the environment.

- Lead the evaluation of products and/or procedures to enhance productivity and effectiveness.

- Provide direct support to the business and IT staff for security-related issues.

- Partner with DevSecOps, engineering, and governance teams to integrate security and compliance requirements into the release and deployment process.

QUALIFICATIONS

- BS/BA degree with 7+ years of experience of general experience in information systems providing project leadership monitoring computer networks and security issues and investigating and resolving security and cybersecurity incidents.

- Experience documenting security incidents and performing security vulnerability assessments.

- Experience working with Agile teams and SAFe to perform testing and uncover system and network vulnerabilities.

- Experience may be considered in lieu of degree.

- Strong working experience in AWS Cloud Security (certification preferred); 3+ ye