Senior Cyber Defense Engineer & Incident Response Lead

General Dynamics Information Technology (GDIT); Huntsville (AL); On-site; USD 147,000 - 199,000; Full time

Job summary

General Dynamics Information Technology (GDIT) in Huntsville, AL is seeking a Cybersecurity Engineer to lead incident response, cyber defense, and forensics within CSSP/DCO environments. You will guide analysts and responders to meet timelines and strengthen defenses across mission systems.

Responsibilities include 24/7 monitoring, vulnerability analysis, RMF/DoD standard compliance, and analytics/dashboard development.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field.
• 7+ years cybersecurity engineering or cyber operations (DoD/federal).
• 3+ years technical leadership and incident response experience.
• Experience leading threat hunting, vulnerability management, or forensic teams.

Responsibilities

• Technical Leadership & Oversight: senior technical authority for incident response, cyber defense, threat hunting, forensics, vulnerability management, and threat emulation.
• Operational Support & Mission Execution: oversee 24/7 monitoring, detection, and incident classification; meet CSSP MTTR targets.
• Threat Intelligence & Proactive Defense: guide intelligence-driven threat hunts; develop analytics and countermeasures for SIEM/EDR/Elastic Stack.
• Documentation, Quality & Compliance: manage SOPs, reports, and RMF/POA&M activities.
• Tooling, Automation & Innovation: develop dashboards, data pipelines, and automation for proactive defense.

Skills

SIEM/EDR

Elastic Stack

ACAS

Cyber analytics

RMF

DoDI 8510.01

NIST SP 800 series

CJCSM 6510.01B

Incident response

Threat hunting

Vulnerability management

Forensics

Education

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field

Tools

Elastic Stack

ACAS

Job description

General Dynamics Information Technology (GDIT) in Huntsville, AL is seeking a Cybersecurity Engineer to lead incident response, cyber defense, and forensics within CSSP/DCO environments. You will guide analysts and responders to meet timelines and strengthen defenses across mission systems.

Responsibilities include 24/7 monitoring, vulnerability analysis, RMF/DoD standard compliance, and analytics/dashboard development.