Type of Requisition:PipelineClearance Level Must Currently Possess:NoneClearance Level Must Be Able to Obtain:ConfidentialPublic Trust/Other Required:NoneJob Family:Cyber SecurityJob Qualifications:Skills:Cyber Defense, Security Information and Event Management (SIEM), Security Operations, Security ToolsCertifications:NoneExperience:8 + years of related experienceUS Citizenship Required:NoJob Description:As a member of the Security Operations Center (SOC) team, in support of the Virginia Information Technology Agency (VITA), a Cyber Security Analyst (Tier III) will be responsible for performing investigation and escalation of security alerts triaged by Tier I and Tier II analysts and others that enter the SOC from network and security systems/applications, the client, and/or from intelligence sources. The position may also require an Analyst to monitor and utilize third party toolsets in the client environment.RESPONSIBILITIES: Provide expertise with Indicators of Compromise (IOCs), Tactics, Techniques, and Procedures (TTPs), Threat Hunting/Intelligence, and customer facing escalations, containment/remediation activities.Provide technical support on event network security logs and trend analysis.Detect the full spectrum of known cyberattacks (e.g., DDoS, malware, phishing, others).Uncover and pinpoint security violations of compromised systems and devicesCorrelate security events from various capabilities to identify attacks and breaches.Analyze and acts on intelligence information to secure customer networks and devicesRecognize successful and unsuccessful intrusion attempts and compromises.Triage security events utilizing relevant details and summary information.Prepare incident reports of analysis methodology and results.Observe, document and report actions taken by malicious actors in customer networks.Accurately and appropriately prioritize and escalate incidents.Examine malware analysis reports and other reporting from incidents to correlate similar events.Conduct log and system analysis for various system, and network and security devices.Document emerging threat intelligence and reported IOCs for security tool integrations.Create and update rules or signatures in security tools and applications.Escalate identified security incidents to the appropriate teams or POCs.Recommend appropriate methods of system remediation and threat mitigation, as needed.Maintain a current understanding of the best practices and strategies used in cyber security.Motivate self and co-workers to expand knowledgebase and capabilities.Develop lessons learned documentation, reporting, and playbooks/SOPs for response within the environment.Provide content engineering expertise to include analyzing, designing, developing and delivering solutions to stop adversaries.REQUIRED QUALIFICATIONS: You MUST have:Technical Training, Certification(s) or Degree, 8+ years of experienceCyber Ark ExperienceSplunk ExperienceQualifying Certification to meet DoD IAT Level III and CSSP Analyst (DoD 8570) requirements to be met within 6 months of starting the position:CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, and/or PenTest+PREFERRED QUALIFICATIONS Even BETTER if you have:10+ years of relevant experienceStrong analytical, organizational and project management skillsUnderstanding of networking fundamentals, the OSI model, and TCP/IP protocolsKnowledge of attack methods and techniques (DDoS, brute force, spoofing, etc.)Experience reviewing network, host and application audit logs (system, security, etc.)Relevant security certifications (Network+, CEH, CCNA, etc.)Familiarity of security standards (NIST, FISMA, Fed RAMP, DCID, CNSS and DoD 8500)Knowledge of cloud IT solutions and security considerations of cloud solution deploymentExperience with any SIEM or log aggregation system, Splunk preferredThe likely salary range for this position is $114,525 - $143,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Scheduled Weekly Hours:40Travel Required:Less than 10%Telecommuting Options:HybridWork Location:USA LA Bossier CityAdditional Work Locations:Total Rewards at GDIT:Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.We connect people with the most impactful client missions, creating an unparalleled work experience that allows them to see their impact every day. We create opportunities for our people to lead and learn simultaneously. From securing our nation’s most sensitive systems, to enabling digital transformation and cloud adoption, our people are the ones who make change real.Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans