Senior Cyber Security Analyst, Cloud & IA SME

Socket.dev; United States; Remote; USD 128,000 - 173,000; Full time

Job summary

GDIT is seeking a Cyber Security Analyst SME to support the Case Management Modernization (CMM) program for the AOUSC. You will serve as the SME on information assurance, CND, and enterprise security strategy, guiding evidence mapping and gate criteria across infrastructure and applications.

You will interact with DevSecOps and governance teams to embed security in releases, track threats, and present security risk analyses to leadership, ensuring secure deployments and compliant operations.

Qualifications

• BS/BA degree with 7+ years of experience in information systems and security leadership.
• Experience documenting security incidents and conducting vulnerability assessments.
• Experience with Agile teams and SAFe testing to uncover vulnerabilities.
• In lieu of degree, substantial relevant experience may be considered.
• Solid understanding of NIST standards and cloud security in AWS environments.

Responsibilities

• Maintain separate security evidence mapping for Infrastructure and Application pipelines across CI/CD.
• Enforce pipeline gating criteria to ensure security evidence is in place before production.
• Perform, monitor, test, and troubleshoot IA issues across CE, NE, DP, and enclave environments.
• Collect and analyze data/events from CND tools and logs.
• Develop and implement security policies and procedures; manage authentication and breach escalation.

Skills

Cyber Defense

Information System Security

NIST Standards

Security Risk

Vulnerability Management

Education

BS/BA degree

Experience may be considered in lieu of degree

Tools

AWS Cloud Security

SIEM

CIS

ISO 27001

Job description

GDIT is seeking a Cyber Security Analyst SME to support the Case Management Modernization (CMM) program for the AOUSC. You will serve as the SME on information assurance, CND, and enterprise security strategy, guiding evidence mapping and gate criteria across infrastructure and applications.

You will interact with DevSecOps and governance teams to embed security in releases, track threats, and present security risk analyses to leadership, ensuring secure deployments and compliant operations.