The Security Monitoring Cyber Auditor is part of a Team of analysts, stationed in diverse CONUS and OCONUS locations tasked with monitoring and protecting the classified and unclassified systems of a major Intelligence Community Agency for fraud, waste, and abuse, to include inappropriate content, illegal activity, Identity leakage, and Insider threat activity. This requires the ability to review event logs, follow checklists, knowledge of normal and malicious user attributable activity, and to prepare case evidence. Being able to gather and handle forensic evidence in accordance with Rules of Evidence and perform forensic analysis of digital information is highly desirable.
Monitor, detect and report indicators of misuse, abuse, data spillage, insider threat, and security violations.
Identify acceptable use policy infractions.
Ability review event logs to determine events of interest
Perform forensic analysis of digital information and gathers and handles evidence.
Monitor for fraud, waste and abuse, including content inappropriate to the workplace, Illegal Activity, Productivity Loss and Non-Compliant Activity, as well as Identity Leakage (PII).
Prepare case evidence and incident reports.
Work on special projects as assigned.
Position may require evening, weekend, holiday, or shift-work (depending on operational tempo)
Desired Skills: Experience with Splunk, Proofpoint, Fidelis, Solera, Windows and Linux Operating Systems The position and hours are based on a flexible 24X7X365 schedule and monitoring requirement, which means given manning and operational tempo, weekend and night positions are available and highly recommended. Currently, weekend day shifts are a priority and any hire will be required to work a minimum of two weekend day shifts (either Saturday or Sunday). Holidays also may be required.
Join our team of professionals, monitoring and protecting very large and sensitive US GOV networks against hostile enemies, foreign and domestic!
DESIRED QUALIFICATIONS: BA/BS, 5+ years experience
We are GDIT. The people supporting some of the most complex government, defense, and intelligence projects across the country. We deliver. Bringing the expertise needed to understand and advance critical missions. We transform. Shifting the ways clients invest in, integrate, and innovate technology solutions. We ensure today is safe and tomorrow is smarter. We are there. On the ground, beside our clients, in the lab, and everywhere in between. Offering the technology transformations, strategy, and mission services needed to get the job done.
GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.