Cybersecurity Engineer

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret/SCI

Clearance Level Must Be Able to Obtain:

Top Secret SCI + Polygraph

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Plan of Action and Milestones (POA&M), RMF, System Security Plans

Certifications:

None

Experience:

5 + years of related experience

US Citizenship Required:

Yes

Job Description:

GDIT is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can’t turn into opportunity. Our work depends on TS/SCI level cleared Cybersecurity Engineer joining our team to support our Intelligence customer in Springfield, VA or St. Louis, MO. 

This position supports the Geospatial Services & Solutions business area to provide high-quality, cost-effective solutions to the customer. As part of the GSS Team the cybersecurity engineer’s expertise is needed to support a sophisticated enterprise environment.

HOW A CYBERSECURITY ENGINEER WILL MAKE AN IMPACT

This role is responsible for implementing and maintaining cybersecurity controls across enterprise infrastructure, including Windows, Linux, network, virtualization, and cloud environments. The successful candidate will execute RMF continuous monitoring activities, implement STIGs, remediate vulnerabilities, manage POA&Ms, and support Assessment & Authorization (A&A) efforts in accordance with NIST SP 800-53, ICD 503, and DoD security requirements. This is a hands-on technical role requiring experience hardening systems, responding to security findings, supporting enterprise security tools, and collaborating with infrastructure teams to maintain a secure, compliant, and resilient operating environment.

SPECIFIC DUTIES AND RESPONSIBILITIES

• Act as the representative of the Information System Security Manager (ISSM), ensuring compliance with DoD and Intelligence Community (IC) information security policies, procedures, and directives.
• Support efforts to operate, maintain, and dispose of information system materials in accordance with RMF, NIST, ICD 503, and applicable security directives, policies, and System Security Plans (SSPs).
• Implement and maintain Security Technical Implementation Guides (STIGs) across Windows, Linux (RHEL), network, virtualization, and cloud environments to ensure compliance with DoD security requirements.
• Execute technical remediation activities to address security findings identified through ACAS, STIG reviews, vulnerability scans, and security assessments.
• Manage assigned Plan of Action and Milestones (POA&Ms) by implementing technical solutions, validating remediation efforts, documenting completion evidence, and supporting POA&M closure.
• Support RMF continuous monitoring activities by implementing required security controls, maintaining A&A documentation, and ensuring compliance with NIST SP 800-53 and ICD 503 requirements.
• Generate and implement required cybersecurity awareness training, ensuring users understand their security responsibilities prior to system access.
• Initiate protective and corrective measures when security incidents, vulnerabilities, or compliance issues are identified.
• Ensure IA hardware, software, and operating systems comply with approved security configuration guides and organizational security baselines.
• Implement and enforce IA policies and procedures as defined by RMF authorization packages and A&A documentation. .
• Ability to work on multiple projects simultaneously in a dynamic, fast-paced, team-oriented environment.
• Perform Operations & Sustainment (O&S) functions for enterprise network security infrastructure, including firewalls, web gateways, mail gateways, IDS/IPS, load balancers, performance monitoring tools, and management systems.