Cyber Incident Response Team (CIRT) Analyst - Requires TS/SCI Clearance

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Top Secret/SCI

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Accreditation Standards, Cyber Defense, Cyber Incident Response, Cyber Infrastructure, Cyber Risks

Certifications:

None

Experience:

4 + years of related experience

US Citizenship Required:

Yes

Job Description:

CYBERSECURITY ANALYST

GDIT has an opening for a CIRT Analyst. This position is part of an IT Service Management contract that includes the operation, modernization, expansion, and evolution of the program’s global IT services. These services span networking, compute, storage, infrastructure, cybersecurity, applications, hosting, and program management. The program operates within the ITIL framework to deliver high-quality IT services to the program, and this role is a critical part of ensuring the security and success of that mission.

MEANINGFUL WORK AND PERSONAL IMPACT

Lead / Manage / Support

Primary responsibility and the role’s impact on the mission

• Perform triage of cyber incidents, identifying scope, urgency, and potential impact.
• Manage, document, and track cyber defense incidents from detection to resolution.
• Provide technical support for real-time cyber defense incident handling tasks.
• Investigate and resolve cybersecurity incidents, ensuring rapid remediation and/or mitigation of cyber threats.
• Demonstrate effectiveness through handling Red Team activity and investigation.
• Provide on-call and after-hours support as needed to meet mission demands.
• Prepare and conduct training courses related to incident response at least four times per calendar year.
• Support efforts to maintain the customer’s CSSP (Cyber Security Service Provider) accreditation, including documentation and technical writing.
• Update and maintain Incident Response tactics, techniques, procedures, and training documentation.

Collaborate

Describe interactions with the team to achieve the mission

• Rapidly respond to time-sensitive security events and work collaboratively under tight deadlines.
• Participate in cross-functional teams and meetings to improve cybersecurity posture.
• Build trust, credibility, and strong working relationships with both customers and team members.
• Exhibit a collaborative mindset with strong customer service skills.
• Communicate clearly with both technical and non-technical stakeholders, ensuring shared understanding of incident status and risk.

Drive

Key outcomes + how the team innovates, resolves challenges, etc.

• Proactively identify and recommend mitigations for vulnerabilities to strengthen the program’s cyber defense posture.
• Collect and analyze network and/or host artifacts from various sources, including logs, system images, and packet captures, to characterize activity, determine root cause and operational impact, and enable rapid remediation.
• Apply strong understanding of cybersecurity concepts, including mitigation strategies, root cause analysis, and Red Team operations, to improve incident response effectiveness.
• Leverage attention to detail, problem-solving capabilities, and analytical thinking to resolve complex cyber incidents.
• Demonstrate dependability, punctuality, and responsiveness to management while meeting mission-critical deadlines.

Utilize

Specific tools, skills or technologies in the role

• Proficiency in collecting and analyzing logs, system images, packet captures, and other artifacts from various sources.
• Familiarity with current cyber defense tools and technologies used for monitoring, detection, analysis, and response.
• Strong organizational skills for multitasking, prioritizing incidents, and meeting tight deadlines.
• Excellent oral and written communication skills for both technical and non-technical audiences, including reports, briefings, and training materials.
• Ability to work independently, adapt to fast-paced environments, and solve complex technical problems.

 

WHAT YOU’LL NEED TO SUCCEED

• Education: Bachelor’s degree in information technology, computer science, or a related technical discipline, or the equivalent combination of education, technical certifications or training, and work experience.
• Certification Requirements:
  • Must possess the appropriate baseline certification(s) to achieve a minimum of DoW 8570.01-M Information Assurance Technical (IAT) Level II (e.g., CompTIA Security+ CE) prior to start.
  • Must obtain an additional computing environment certification within six months of hire based on position designation (e.g., CEH, CCNA-Security, CND, etc.).
  • Candidate may discuss specifics with the program’s Cyber Security Manager.
  • When DoW 8140 requirements are implemented on the program/contract, employees will need to conform to 8140 certification standards.
• Security Clearance Level:
  Active TS/SCI
• Location:
  Full time onsite in Falls Church, VA.
• Role Requirements:
  • 4+ years of practical experience with cyber incident response, especially on DoW networks. 
  • Experience with digital forensics and analysis of network and host-based artifacts.

 

OWN YOUR OPPORTUNITY

Explore a career in cyber at GDIT and you’ll find opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.

#GDITPriority

The likely salary range for this position is $93,500 - $126,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Onsite

Work Location:

USA VA Falls Church

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

 

 

Our Identity Verification Process:

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.