Data Center & Hybrid Cloud Security Lead

General Dynamics IT; Washington (District of Columbia, WA); On-site; USD 140,000 - 190,000; Full time

Job summary

General Dynamics IT seeks a Data Center Security Lead to support the U.S. Department of State’s Bureau of Diplomatic Technology.

You will lead security operations across enterprise data centers and hybrid cloud platforms, ensuring continuous protection, compliance, and resilience of mission-critical systems. Responsibilities include vulnerability scanning, patch management, endpoint detection and response, Zero Trust enforcement, ATO lifecycle management, audit readiness, and access control

Qualifications

• 8+ years of related experience in enterprise cybersecurity operations
• Experience in data center environments with hybrid infrastructure and multi-platform security responsibilities
• Certifications: CompTIA Security+, CISSP (or equivalent) preferred

Responsibilities

• Lead vulnerability scanning operations across DT-managed systems with policy configuration and remediation coordination
• Oversee patch management cycles for Windows, Linux, network appliances, and hypervisors
• Manage vulnerability remediation workflows, POA&Ms, patch exceptions, and risk reporting to leadership
• Oversee endpoint security platforms (e.g., Cortex XDR, Tripwire) and ensure policy enforcement
• Integrate alerts and telemetry into enterprise SIEM and coordinate with SOC tooling and processes

Skills

Cybersecurity Operations

Data Center Security

Hybrid Cloud Security

IT Security Operations

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or Engineering

Master's degree preferred

Job description

General Dynamics IT seeks a Data Center Security Lead to support the U.S. Department of State’s Bureau of Diplomatic Technology.

You will lead security operations across enterprise data centers and hybrid cloud platforms, ensuring continuous protection, compliance, and resilience of mission-critical systems. Responsibilities include vulnerability scanning, patch management, endpoint detection and response, Zero Trust enforcement, ATO lifecycle management, audit readiness, and access control