Cybersecurity Engineer

GDIT seeks a Cybersecurity Engineer for the DISA DEOS program to design and sustain secure Azure-hosted architectures and support secure operations.

Responsibilities

• Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments (including NSGs, Azure VMs supporting Microsoft 365, and management, monitoring, or integration services).
• Build, configure, and administer Azure Virtual Machines for DEOS, including OS hardening using DISA STIGs/SRGs, patching, baseline configuration, and performance tuning.
• Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (automated patching, configuration enforcement, log collection, backup/restore, and response actions).
• Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust, identity and access management, and boundary protections.
• Support DISA/DoW Risk Management Framework (RMF) activities by ensuring security requirements are built into designs and implementations.
• Contribute to and maintain DEOS Azure-focused RMF/ATO artifacts, including SSP, SAR, POA&M, diagrams, and implementation statements.
• Map and implement DISA STIGs and DoD Cloud Computing SRG, along with relevant eMASS controls across Azure VMs and associated services.
• Identify, document, and communicate security risks or compliance gaps to DEOS leadership and customer stakeholders, and recommend practical mitigations.
• Coordinate incident response for security and operational incidents affecting DEOS and the Cybersecurity Threat Hunt team.
• Participate in incident triage, technical analysis, and root-cause investigations.
• Lead technical containment, eradication, and recovery activities (such as isolating systems or revoking credentials) in coordination with the DEOS incident manager and DISA stakeholders.
• Capture lessons learned to update runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.
• Collaborate with GDIT, DEOS, and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and DEOS risk posture.
• Provide consultancy-style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
• Support DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.
• Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
• Ensure work aligns with GDIT Security Standard Practices, DEOS governance processes, and applicable ISO 27001 information security expectations.
• Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.

Requirements

• Bachelor’s Degree (or an additional 4 years of experience in lieu of degree).
• Active Secret security clearance required.
• 8570 IAT Level II current certification required (examples: Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SSCP).
• 6+ years of related experience.
• Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands-on work with production systems.
• Demonstrated Azure experience: deploying and managing Azure Virtual Machines, implementing secure configurations, patching, monitoring, and developing or operating Azure Automation Runbooks.
• Experience working within RMF/ATO processes (DoW RMF, DoD Cloud Computing SRG, DISA STIGs, vulnerability scanning) and producing or maintaining associated documentation.
• Experience participating in or coordinating incident response for complex systems, including triage, containment, eradication, recovery, and lessons learned.
• Strong consultative communication skills to explain complex security and systems engineering topics to technical and non-technical stakeholders.

Technologies

• Azure
• Azure Virtual Machines
• Microsoft 365
• Azure Automation Runbooks
• NSGs
• DISA STIGs
• SRGs
• Zero Trust
• Identity and access management
• Risk Management Framework (RMF)
• ATO
• SSP, SAR, POA&M
• eMASS
• DoD Cloud Computing SRG
• ISO 27001
• Vulnerability scanning

Benefits

• Comprehensive benefits and wellness packages
• 401K with company match
• Competitive pay and paid time off

Desired

• DoW 8570/8140 baseline certification at the appropriate level (examples: CISM, CASP+, CISSP, or equivalent).
• Microsoft Azure certifications (examples: AZ-104, AZ-500, AZ-700) and/or Microsoft 365 security or collaboration experience relevant to DEOS.
• Prior experience on DISA or enterprise DoW collaboration or cloud programs.
• Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.

Additional Information

• Location: Chantilly, Virginia (Onsite Workplace)
• Travel Required: Less than 10%
• U.S. Citizenship Required
• Requisition Type: Regular
• REQ#: RQ231346
• Public Trust: None

Identity Verification Process

• Hiring process includes identity verification using advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
• Virtual interviews require being on camera.
• GDIT reserves the right to take a picture to verify identity and prevent fraud.