网络安全架构师
Cybersecurity Architect
职位类型:
常规职位
当前必须具备的保密等级:
机密
必须能够获得的保密等级:
机密
其他必要条件:
无
职位系列:
网络与 IT 风险管理
职位资格:
技能:
网络安全、信息安全、信息技术安全
认证:
无
经验:
5年以上相关经验
美国公民要求:
是
职位描述:
GDIT 是零信任防御领域市场的主要系统集成商——为政府客户开发和交付创新解决方案。我们的零信任业务持续快速增长,这是一个加入我们团队并参与创建真正产生影响的网络安全解决方案的机会。
作为国防部客户的企业零信任计划中的网络安全架构师,你的职责包括:
- 制定和实施长期网络安全策略和计划,确保与业务目标和监管要求一致。
- 领导大型分布式系统的 RMF 工作,以获得 ATO
- 识别、分析和评估安全风险,制定和实施缓解策略。
- 创建并执行安全政策、流程和指南,以确保合规性并保持安全环境。
- 支持事件响应工作,包括检测、遏制、清除和恢复,在发生安全漏洞或事件时。
- 支持漏洞评估、渗透测试和其他安全测试,以发现系统和网络中的弱点和漏洞。
- 与其他 IT 专业人员、业务利益相关者和外部供应商合作,确保满足安全需求。
- 及时了解最新的网络安全威胁、技术和最佳实践。
- 为初级安全专业人员提供指导和培训,向员工传授安全最佳实践。
- 与政府客户对接,展示项目网络安全风险。
基本资格:
- 理解零信任网络架构涉及的安全原则及实现所需的工具
- 理解网络的工作原理,包括协议、设备和安全措施,如防火墙和 VLAN
- 了解数据保护方法,包括加密、去标识化和数据掩码
- 理解风险评估、分析和缓解技术
- 具备识别、分析和应对安全事件的技能
查看英文原文
Type of Requisition:
RegularClearance Level Must Currently Possess:
SecretClearance Level Must Be Able to Obtain:
SecretPublic Trust/Other Required:
NoneJob Family:
Cyber and IT Risk ManagementJob Qualifications:
Skills:
Cybersecurity, Information Security, Information Technology SecurityCertifications:
NoneExperience:
5 + years of related experienceUS Citizenship Required:
YesJob Description:
GDIT is the leading systems integrator in the Zero Trust Defense sector market—developing and delivering innovative solutions to government customers. Our Zero Trust business continues experiencing rapid growth, and this is an opportunity to join our team and be a part of creating Cybersecurity solutions that make a real impact.
As a Cyber Security Architect on an Enterprise Zero Trust Program for a DoD client, your responsibilities will include:
- Develop and implement long-term cybersecurity strategies and plans, ensuring alignment with business goals and regulatory requirements.
- Leading RMF efforts for a large distributed system in order to obtain an ATO
- Identify, analyze, and assess security risks, developing and implementing mitigation strategies.
- Create and enforce security policies, procedures, and guidelines to ensure compliance and maintain a secure environment.
- Support incident response efforts, including detection, containment, eradication, and recovery, in the event of security breaches or incidents.
- Support vulnerability assessments, penetration testing, and other security tests to identify weaknesses and vulnerabilities in systems and networks.
- Collaborate with other IT professionals, business stakeholders, and external vendors to ensure security requirements are met.
- Remain up to date on the latest cybersecurity threats, technologies, and best practices.
- Provide guidance and mentoring to junior security professionals and trains employees on security best practices.
- Interface with government customer to present program cyber risks.
Basic Qualifications:
- Understanding of security principles involved in Zero Trust Network Architecture and tools required to implement it
- Understanding of how networks function, including protocols, devices, and security measures like firewalls and VLANs.
- Knowledge of data protection methods, including encryption, pseudonymization, and data masking.
- Understanding of risk assessment, analysis, and mitigation techniques.
- Skills in identifying, analyzing, and responding to security incidents.
- Ability to analyze problems, troubleshoot security issues, and develop effective solutions.
- Capacity to learn and adapt to new technologies and evolving threats.
- Ability to clearly explain complex technical concepts to both technical and non-technical audiences.
- Ability to work effectively with other teams and stakeholders.
- Detail oriented.
Required Skills/Knowledge:
- 5-10 years of experience in IT security and IT risk management is recommended.
- Current Secret clearance.
- DoD 8570 IAT Level III certification.
- Advanced IT security certifications (like CISSP, CEH, GIAC).
- Bachelor’s degree in field like Computer Science, Information Technology, or a related field.
- Strong foundation in information security frameworks and IT risk management practices.
- Expertise in DoD RMF Controls and how to correlate the various aspects of the systems, networks, and applications to ensure controls are closed and/or mitigated, and documented in furtherance of obtaining ATO
- Expertise in security audits, compliance requirements, and regulatory standards.
- Deep understanding of enterprise architecture principles and how to integrate security into the overall IT landscape.
- Knowledge of secure coding practices, vulnerability assessment, and penetration testing.
- Knowledge of common operating systems (Windows, Linux, Unix) and their security configurations.
- Proficiency in various zero trust security tools and technologies, such as intrusion detection systems, data loss prevention (DLP) solutions, identity and access management (IAM) systems, firewalls, and ZTNA.
GDIT IS YOUR PLACE:
- Full-flex work week to own your priorities at work and at home
- 401K with company match
- Comprehensive health and wellness packages
- Internal mobility team dedicated to helping you own your career
- Professional growth opportunities including paid education and certifications
- Cutting-edge technology you can learn from
- Rest and recharge with paid vacation and holidays
The likely salary range for this position is $149,469 - $184,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Scheduled Weekly Hours:
40Travel Required:
25-50%Telecommuting Options:
RemoteWork Location:
Any Location / RemoteAdditional Work Locations:
Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. GDIT typically provides new employees with 15 days of paid leave per calendar year to be used for vacations, personal business, and illness and an additional 10 paid holidays per year. Paid leave and paid holidays are prorated based on the employee’s date of hire. The GDIT Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
Our Identity Verification Process:
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.About Our Work:
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events atgdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected VeteransOriginally posted on Himalayas