Cybersecurity Information Security Assessor at General… · Chantilly

Cybersecurity Information Security Assessor

Location: USA VA Chantilly

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Secret

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Cyber Defense, Cybersecurity Operations, Information Assurance, Information Systems, Network Defense

Certifications:

None

Experience:

6 + years of related experience

US Citizenship Required:

Yes

Job Description:

GDIT is seeking a Cybersecurity Information Security Accessor for the DISA Defense Enterprise Office Solution (DEOS) program to provide integrated cybersecurity and systems engineering support for cloud collaboration services delivered to DoD customers. This role designs and sustains secure architectures for Azure‑hosted workloads, implements and automates controls for DEOS environments, and coordinates incident response activities with DISA and program stakeholders.

In this role, the DEOS Cybersecurity Information Security Accessor applies consultive approaches to uncover security and operational needs, anticipate threats, and position secure solutions that protect DoW information and ensure DEOS mission availability.

This position is 100% onsite in Chantilly, VA. Please be advised that no travel costs will be provided.

Meaningful Work and Personal Impact:

Security & Systems Engineering for DEOS Azure Environments

• Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments (e.g., NSGs, Azure VMs supporting M365, management, monitoring, or integration services).

• Build, configure, and administer Azure Virtual Machines supporting DEOS, including OS hardening (e.g., DISA STIGs/SRGs), patching, baseline configuration, and performance tuning.

• Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (e.g., automated patching, configuration enforcement, log collection, backup/restore, and response actions).

• Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.

RMF / ATO and DISA/DoD Compliance Support

• Support DISA/DoW Risk Management Framework (RMF) activities for DEOS systems, ensuring security requirements are engineered into designs and implementations from the outset.

• Contribute to and maintain RMF/ATO artifacts (SSP, SAR, POA&M, diagrams, implementation statements) specific to DEOS Azure‑hosted components.

• Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.

• Identify, document, and communicate security risks or compliance gaps to DEOS leadership and customer stakeholders, recommending practical mitigations.

Secure Operations & Incident Response Coordination

• Coordinate incident response for security and operational incidents impacting DEOS and the Cybersecurity Threat Hunt team.

• Participate in incident triage, technical analysis, and root‑cause investigations.

• Direct technical containment, eradication, and recovery activities (e.g., isolate or revoke credentials), in coordination with the DEOS incident manager and DISA stakeholders.

• Capture lessons learned and drive assist in updates to runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.

Consultative Customer and Stakeholder Engagement

• Engage with GDIT, DEOS and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.

• Provide consultancy‑style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.

• Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.

Documentation, Governance, and Continuous Improvement

• Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.

• Ensure activities align with GDIT Security Standard Practices, DEOS‑specific governance processes, and applicable ISO 27001 / information security management expectations.

• Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.

What You’ll Need to Succeed (Required):

Education: Bachelor’s Degree. An additional 4 years of experience may be substituted in lieu of degree.

Clearance: Minimum of an active Secret security clearance required.

Certification: Current 8570 IAT Level II (Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP) required.

Experience: 6+ years of related experience.

Technical skills:

• Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands‑on work with production systems.

• Demonstrated Azure experience, including: Deploying and managing Azure Virtual Machines, Implementing secure configurations, patching, and monitoring, and Developing or operating Azure Automation Runbooks.

• Experience working within RMF/ATO processes (DoW RMF, DoD CC SRG, DISA STIGs, Vulnerability scanning) and producing/maintaining associated documentation.

• Experience participating in or coordinating incident response for complex systems (triage, containment, eradication, recovery, lessons learned).

• Strong consultative communication skills with the ability to explain complex security and system engineering topics to both technical and non‑technical stakeholders.

What You’ll Need to Succeed (Desired):

• DoW 8570/8140 baseline certification at the appropriate level (e.g., CISM, CASP+, CISSP, or equivalent).

• Microsoft Azure certifications (e.g., AZ‑104, AZ‑500, AZ‑700) and/or Microsoft 365 security/collaboration experience relevant to DEOS.

• Prior experience on DISA or enterprise DoW collaboration/cloud programs.

• Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.

GDIT IS YOUR PLACE:
At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities.

• Support: An internal mobility team focused on helping you achieve your career goals.

• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off.

• Community: Award-winning culture of innovation and a military-friendly workplace.

OWN YOUR OPPORTUNITY:

• Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.

The likely salary range for this position is $127,500 - $172,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Onsite

Work Location:

USA VA Chantilly

Additional Work Locations:

USA MD Fort Meade

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process:

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work:

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events at

gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans