Information Security Analyst Associate

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Suitability:

Public Trust/Other Required:

None

Job Family:

Information Security

Job Qualifications:

Skills:

Cybersecurity, Incident Response, Microsoft Office, Security Operations

Certifications:

Experience:

0 + years of related experience

US Citizenship Required:

No

Job Description:

At GDIT, people are our differentiator. We are seeking an Associate Cyber Security Analyst to join our team to support Centers for Medicare & Medicaid Services (CMS) activities at Windsor Mill, MD. As a security analyst supporting the Healthcare Integrated General Ledger Accounting System (HIGLAS) contract, you will work with a team of analysts and engineers to scrutinize network and system events for potential indicators of threats or compromise. This effort includes implementing and maintaining security safeguards designed to minimize the CMS security risk and protect confidentiality, integrity, and availability of sensitive data, including privacy information.

This is a junior position on the Endpoint Detection and Incident Response (EDIR) team and part of a larger security team responsible for establishing and maintaining a high security posture for a critical federal information system. Our team’s security responsibility includes, but not limited to, developing IT security strategy and architecture, establishing security operations and monitoring, implementing risk and vulnerability management processes, remediating weaknesses, conducting audits and assessments, maintaining all manner of IT security documentation, managing access, and enforcing Federal and organizational policies.

This position allows the opportunity to work 100% remote from home preferably in Eastern or Central time zones. Those local to the Baltimore MD area will have opportunity to come into our office as needed.

HOW YOU WILL MAKE AN IMPACT:

• Provide support to and participate in EDIR continuous monitoring activities including monitoring for file integrity, malware detection, host-based intrusions and firewalls, and other related activities.
• Analysis, assessment, and response to anomalous activity in support of security events and incident response.
• Draft documentation to detail potential risks associated with known security issues within the environment.
• Develop and maintain Standard Operating Procedures (SOPs) related to security tasking.
• Coordinate and collaborate with technical subject matter experts (SMEs) to ensure technical and operational security controls are operating as expected.

WHAT YOU’LL NEED TO SUCCEED:

• Ability to pass CMS background check and meet the residency requirement for having resided in the US at least (3) three out of the last (5) five years.
• Bachelor’s degree in Information Security, Information Technology, or equivalent years of related information security experience.
• General knowledge of endpoint security and system administration such as file integrity, malware detection, host-based intrusions, system hardening, etc.
• Knowledge of general computing technologies (e.g., Windows Server, Linux, databases, TCP/IP network stack, scripting languages, etc.).
• General experience with analysis of security or information technology issues.

IT WOULD BE GREAT IF YOU ALSO HAD:

• Relevant, entry-level IT or security certifications, such as Security+ CE.
• Knowledge of Splunk for conducting investigations and analysis.
• Knowledge of CrowdStrike, Tripwire Enterprise, or other HIDS-related tools.
• Knowledge of Axonius for asset aggregation and discovery.
• Knowledge of DevSecOps and CI/CD pipeline and code scanning.
• Knowledge of CMS security guidelines and technology requirements.
• Strong analytical, communication, written, and verbal skills with the ability and comfort level to conduct presentations for existing customer audiences.

WHAT GDIT CAN OFFER YOU IN THIS POSITION:

• An opportunity to learn and grow in the cybersecurity realm while providing critical security oversight for a White House High Value Asset (HVA).
• Association and inclusion on a team of dedicated security analysts and engineers, collaborating to improve the HIGLAS security program.
• Exposure to new and emerging security technologies and processes.

The likely salary range for this position is $55,250 - $74,750. This is not,