Cyber Security Analyst Senior Advisor

General Dynamics Information Technology; Tampa (FL); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health plan

Career mobility support

Education and certifications paid

Job summary

General Dynamics Information Technology seeks a Cybersecurity Analyst Senior Advisor to join a government/contractor team at USSOCOM. The role focuses on implementing and monitoring security controls to maintain an Authorization to Operate (ATO) and tracking certification databases and tools for secure documentation.

The position requires 8+ years of experience, TS/SCI clearance, and hands-on expertise with Python/Bash/PowerShell automation, OWASP Top 10, cloud platforms, Nmap and Burp Suite.

Qualifications

• Technical training, certification(s) or degree; 8+ years of related work experience.
• Proficiency in Python, Bash or PowerShell to automate tasks.
• Familiarity with OWASP Top 10, cloud platforms and security software such as Nmap and Burp Suite.
• Must obtain and maintain CompTIA Pen Test certification per 8140/8570.

Responsibilities

• Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives.
• Conducts complex security architecture analysis to evaluate and mitigate issues; develops security policies and procedures.
• Develops technical assessments and supports security policy implementation across data, software, hardware and telecoms.
• Performs product evaluations and tests security architecture to produce detailed engineering specs with vendor technology recommendations.
• Provides technical oversight and enforcement of security directives, ensuring awareness and training for system staff.
• Assesses business impact of security incidents and reports to senior management.

Skills

8+ years experience

Python scripting

Bash scripting

PowerShell

OWASP Top 10

Cloud platforms

Nmap

Burp Suite

CompTIA Pen Test

Education

Technical training or degree

Tools

Nmap

Burp Suite

Job description

GDIT is seeking a Cybersecurity Analyst Senior Advisor to participate as a member of an integrated government/contractor team of technical and functional experts in the conduct of cybersecurity at USSOCOM. The office monitors USSOCOM networks and systems for cyber threats and works with stakeholders to mitigate and remediate identified cyber vulnerabilities. This position will be responsible for implementing and monitoring necessary security controls to maintain an Authorization to Operate (ATO). Track and maintain certification information databases, websites and tools to ensure that networks, systems and devices are properly documented and managed from a security perspective.

WHAT YOU WILL DO:

• Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives.

• Conducts complex security architecture analysis to evaluate and mitigate issues. Develops policies and procedures for securing the system infrastructure and applications.

• Develops complex technical and programmatic assessments, evaluates engineering and integration initiatives and provides complex technical support to assess security policies, standards and guidelines. Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.

• Performs highly complex product evaluations, recommends and implements products/services for network security. Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.

• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures. Develops manuals and ensures system support personnel receive/maintain security awareness and training.

• Assesses the impact on the business unit/customer caused by theft, destruction, alteration or denial of access to information and reports to senior management.

WHAT YOU'LL NEED TO SUCCEED

• Technical Training, Certification(s) or Degree, 8+ years of related work experience

• Must have basic coding and/or scripting using Python, Bash, or PowerShell to automate tasks

• Must have familiarity with OWASP Top 10, cloud platforms, & security software (Nmap, Burp Suite preferred)

• Must obtain and maintain CompTIA Pen Test certification (or equivalent) per 8140/8570 requirements.

• Experience working with IP networking, networking protocols and understanding of security related technologies including encryption, IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic mail and access-lists.

• Experience working with internet, web, application and network security techniques.

• Experience working with relevant operating system security (Windows, Linux, etc.).

• Experience working with leading firewall, network scanning and intrusion detection products and authentication technologies.

• Thorough understanding and practical expertise with Intelligence Community Directive 503 (ICD 503) and National Institute of Standards and Technology (NIST) Risk Management Framework.

• Experience producing and maintaining Assessment and Authorization packages.

• Experience validating NIST 800-53 Security Controls; CNSSI 1253 Security Controls and Overlays.

• Work Location: On Customer Site- Tampa, FL

• Security Clearance: TS/SCI clearance is required.

WHAT GDIT CAN OFFER

• 401K with company match

• Comprehensive health and wellness packages

• Internal mobility team dedicated to helping you own your career

• Professional growth opportunities including paid education and certifications

• Cutting-edge technology you can learn from and apply to solve real world problems

• Rest and recharge with paid vacation and holidays