Cybersecurity Engineer - Principal

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

MBI (T2)

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Cable Engineering, Cybersecurity, Cybersecurity Operations, Information System Security

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

No

Job Description:

Security Engineer - Principal

Own your career as a Security Engineer - Principal at GDIT. Here, you’ll have the opportunity to build strong lines of cyber defense using cutting-edge technologies. Your work in cyber security at GDIT will have an impact on securing our clients’ missions and ensuring we anticipate the threats of tomorrow.

At GDIT, people are our differentiator. As a Security Engineer - Principal you will help ensure today is safe and tomorrow is smarter.

HOW A CYBER ENGINEER WILL MAKE AN IMPACT

● Designs and evaluates end-to-end systems through their entire life cycle. Ensures products and systems comply with requirements and customer information assurance and cyber security standards and practices through formal verification methods with specific emphasis on network operations and cyber warfare tactics.
● Conducts software and systems engineering and software systems research to develop new capabilities, ensuring cybersecurity is fully integrated. Conducts comprehensive technology research to evaluate potential vulnerabilities in cyberspace systems

● Designs, develops, tests, and evaluates information system security throughout the systems development life cycle - Tests, implements, deploys, maintains, and administers the infrastructure hardware and software

● Conducts risk assessment and provides recommendations for application design - Responsible for a wide range of security issues including architectures, firewalls, electronic data traffic, and network access

● Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research

● Designs and develops new systems, applications, and solutions for external customer enterprise-wide cyber systems and networks

● Ensures the logical and systematic conversion of customer or product requirements into total systems solutions that acknowledge technical, schedule, and cost constraints

● Integrate new architectural features into existing infrastructures, designs cybersecurity architectural artifacts, provides architectural analysis and relates existing system to future needs and trends, embeds advanced forensic tools and techniques for attack reconstruction, provides engineering recommendations, and resolves integration/testing issues

● Builds and maintains trusted relationships with customers

● May coach and provide guidance to less-experienced professionals

● May serve as a team or task lead

Minimum Requirements:

• Bachelor’s degree in business related field, engineering, or a related scientific or technical discipline with at least 10+ years of experience
• Must have 2 (two) of the following: CISSP, CISM, CGRC, Security+
• Must have 5+ years of progressive experience managing security remediation and configuration
• Must have 5+ years in managing network/system/application vulnerability scanning and security patching to support Continuous Readiness in Information Security Program or similar information readiness in another Government organization of similar size, tasking and complexity
• Must have experience supporting a Government agency
• Must demonstrate critical thinking skills to resolve stakeholder conflicts
• Must have outstanding written and verbal communication skills with the ability to create reports and present business leaders
• Must be able to obtain a Position of Trust and successfully pass a thorough Government background screening process requiring the completion of detailed forms and fingerprinting
• Preferred: Cloud, Privacy and AI experience and/or certification (i.e., AWS CCP, AWS AI applications, CDPSE, IAPP CIPT, IAPP AICP, Databricks
• Location: Hybrid- 3 days on-site

Security Engineer:

Responsible for providing Enterprise IT Services and Support for ASSIST operations and engineering.

Uses security tools to monitor, investigate, perform security risk assessment and identify anomalous events that are detected by security devices or reported to the Security Operations Center (SOC) from exte