Cyber Security Analyst Senior/SOC (SECRET clearance)

Own your career as a Cyber Security Analyst Senior at GDIT. Here, you’ll have the opportunity to build strong lines of cyber defense using cutting-edge technologies. Our work depends on the Cyber Security Analyst Senior joining our team supporting a federal Security Operations Center (SOC).

HOW A CYBER SECURITY ANALYST SENIOR WILL MAKE AN IMPACT:

• Performs forensic analysis of digital information and gathers and handles evidence.

• Identifies network computer intrusion evidence and perpetrators

• Lead the analysis and investigation of information security events (IDS/DLP/SIEM/etc.) in a 24X7 SOC environment to detect, verify, and respond swiftly to cyber threats and remove false positives. 

• Serve as a technical point of escalation and provide mentoring for junior Security Operations Center (SOC) analysts. 

• Responsible for investigating incidents, analyzing attack methods, researching new defense techniques and tools, developing security policy, and documenting procedures for SOC. 

• Familiar with malware analysis and other attack analysis to extract indicators of compromise. Perform data security event correlation between various systems. 

• Prepare reports, summaries, and other forms of communication that may be both internal and client-facing. 

• Maintain familiarity with industry trends and security best practices. 

• Ensure compliance with SLA, process adherence, and process improvisation to achieve operational objectives. 

WHAT YOU’LL NEED TO SUCCEED:

• The position requires an active SECRET security clearance

• BA/BS Degree (or three (3) years of additional experience in lieu of degree)

• The position requires seven (7+) years of related experience

• Strong knowledge of TCP/IP protocols, basic networking, etc. 

• Ability to parse/analyze network logs (proxy, firewall, antivirus, email, etc.) 

• PCAP analysis (Wireshark familiarity, Trellix) 

• IDS (know what an IDS is/does. Snort, Suricata, etc.) 

• Familiarity with typical attack/exploit techniques (OWASP top 10, what a command injection looks like, how to identify malicious code on a webpage, how to read obfuscated code etc.) 

• Significant expertise in SIEM (Splunk, ArcSight, Crowdstrike, etc.) 

• Threat Intelligence (Open source feeds, IOCs, Known APT TTPs, etc.) 

• Threat Hunting (Know what to look for, analyst mindset) 

• Scripting (Ideally Python, PowerShell, Bash) 

• Command line Interface 

• Linux (Just the basics necessary, should at least know concepts like what is root and basic directory structure) 

• Knowledge of Enterprise Windows configurations (Mainly Active Directory, how it works, why it’s essential to monitor/protect) 

• Written Communications (Analyst will be interacting with other departments and often with those outside the org via email)

• Remote / Washington, D.C.  (the position may be transitioned to ON-SITE in D.C.)

• This work is anticipated to start anytime between September 2025 and March 2026.

• US Citizenship Required

GDIT IS YOUR PLACE:

• Full-flex work week to own your priorities at work and at home

• 401K with company match

• Comprehensive health and wellness packages

• Internal mobility team dedicated to helping you own your career

• Professional growth opportunities including paid education and certifications

• Cutting-edge technology you can learn from

• Rest and recharge with paid vacation and holidays

#OpportunityOwned #GDITCareers #WeAreGDIT #CompanyWithASoul