Cybersecurity Engineer

GDIT is seeking a Cybersecurity Engineer for the DISA DEOS program to design and sustain secure architectures for Azure-hosted workloads, implement and automate controls, and coordinate incident response. This role is 100% onsite in Chantilly, VA.

Responsibilities

• Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments (including NSGs, Azure VMs supporting M365, and supporting management, monitoring, or integration services)
• Build, configure, and administer Azure Virtual Machines for DEOS, including OS hardening (DISA STIGs/SRGs), patching, baseline configuration, and performance tuning
• Develop, maintain, and operate Azure Automation Runbooks for secure operations and compliance, including automated patching, configuration enforcement, log collection, and backup/restore and response actions
• Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections
• Support DISA/DoW Risk Management Framework (RMF) activities by engineering security requirements into designs and implementations from the outset
• Contribute to and maintain RMF/ATO artifacts for DEOS Azure-hosted components, including SSP, SAR, POA&M, diagrams, and implementation statements
• Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services
• Identify, document, and communicate security risks and compliance gaps to DEOS leadership and customer stakeholders, including practical mitigation recommendations
• Coordinate incident response for security and operational incidents impacting DEOS and the Cybersecurity Threat Hunt team
• Participate in incident triage, technical analysis, and root-cause investigations
• Lead technical containment, eradication, and recovery activities (such as isolating or revoking credentials) in coordination with the DEOS incident manager and DISA stakeholders
• Capture lessons learned and update runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence
• Engage with GDIT, DEOS, and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture
• Provide consultancy-style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations
• Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity
• Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts
• Align activities with GDIT Security Standard Practices, DEOS-specific governance processes, and applicable ISO 27001 information security expectations
• Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency

Requirements

• Bachelor’s Degree (an additional 4 years of experience may be substituted in lieu of degree)
• Minimum 6+ years of related experience
• Active Secret security clearance required
• Current 8570 IAT Level II certification required (Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP)
• Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands-on work with production systems
• Demonstrated Azure experience, including deploying/managing Azure Virtual Machines, implementing secure configurations, patching, monitoring, and developing/operating Azure Automation Runbooks
• Experience working within RMF/ATO processes (DoW RMF, DoD CC SRG, DISA STIGs, vulnerability scanning) and producing/maintaining associated documentation
• Experience participating in or coordinating incident response for complex systems, including triage, containment, eradication, recovery, and lessons learned
• Strong consultative communication skills to explain complex security and system engineering topics to technical and non-technical stakeholders

Technologies

• Azure
• Azure Virtual Machines
• Microsoft 365
• Azure Automation Runbooks
• NSGs
• DISA STIGs
• SRGs
• Zero Trust
• Identity and access management
• Risk Management Framework (RMF)
• ATO
• SSP, SAR, POA&M
• eMASS
• DoD Cloud Computing SRG
• ISO 27001
• Vulnerability scanning

Key Skills for Success

• Cyber Defense
• Cybersecurity Operations
• Information Assurance
• Information Systems
• Network Defense

Desired (What You’ll Need to Succeed)

• DoW 8570/8140 baseline certification at the appropriate level (examples listed: CISM, CASP+, CISSP, or equivalent)
• Microsoft Azure certifications (examples listed: AZ-104, AZ-500, AZ-700) and/or Microsoft 365 security/collaboration experience relevant to DEOS
• Prior experience on DISA or enterprise DoW collaboration/cloud programs
• Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment

Benefits

• Comprehensive benefits and wellness packages
• 401K with company match
• Competitive pay and paid time off

Job Details

• Location: Chantilly, VA (Onsite)
• Salary: USD 127,500 - 172,500 per year
• Experience: 6+ years
• Travel Required: Less than 10%
• U.S. Citizenship Required
• Requisition Number: RQ231346
• Public Trust: None
• Requisition Type: Regular

Our Identity Verification Process

• Identity verification uses advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud
• Virtual interviews require being on camera
• GDIT may take your picture to verify identity and prevent fraud