Cybersecurity Officer; Entry to Senior Level) TS​/SCI Poly Security Clearance

Position: Cybersecurity Officer (Entry to Senior Level) TS/SCI with Poly with Security Clearance
Position

Description:

CGI Federal has an exciting opportunity for a Cybersecurity Officers within our Intel sector advancing the national security mission through cutting edge technology. You must have a passion for keeping pace with rapidly evolving technology advancements and leveraging your knowledge on a highly collaborative team to deliver state-of-the-art capabilities. The Cybersecurity Officer protects an organization's digital assets by monitoring systems for threats, investigating basic security alerts, and helping enforce company security rules.

It is a foundational role focused on learning, triage, and assisting senior staff with day-to-day security operations. CGI Federal is growing its high-performance team whose members share a passion for building high-quality, scalable, advanced IT solutions in a collaborative, fast-paced, outcome-driven mission. This position is located in our Arlington office; however, a hybrid working model is acceptable. Your future duties and responsibilities:

Key Responsibilities (Entry Level)

• System Monitoring:
Watch security tools and dashboards for unusual network traffic or suspicious activity.

• Alert Triage:
Review basic security alerts, determine if they are false alarms, and escalate real threats to senior team members.

• Access Management:
Assist with granting or removing employee access to company software and sensitive files.

• Security Awareness:
Help educate staff on security best practices, such as recognizing phishing emails.

• Incident Assistance:
Follow established step-by-step procedures to respond to minor security incidents (e.g., locking a compromised account).

• Documentation:
Write simple reports outlining diagnostic test results or security events.

Key Responsibilities (Junior Level)
Security Monitoring & Incident Response

• Monitor Alerts:
Continuously review security logs and network traffic for suspicious activity, anomalies, or breaches.

• Triage Incidents:
Serve as the first responder to basic security alerts, mitigating minor threats and collecting preliminary data.

• Escalation:
Escalate complex or high-severity cyber attacks to Level 2 or Level 3 senior security teams.
Vulnerability Management

• Diagnostic Testing:
Execute diagnostic tests and vulnerability scans to identify potential loopholes in systems and networks.

• Patch Management:
Apply antivirus updates, firewall configurations, and security patches across enterprise systems.

• Report Generation:
Document known vulnerabilities and draft regular system status reports for management.
Compliance & Governance

• Data Protection:
Enforce organizational security policies and ensure adherence to statutory or regulatory requirements regarding information access and privacy.

• Access Control:
Grant, review, and revoke user access credentials to maintain the principle of least privilege.

• Auditing:
Conduct periodic security audits to measure compliance and identify inefficiencies.
Training & Awareness

• Phishing Prevention:
Lead or assist in employee cybersecurity awareness training and phishing simulations.

• Resource Development:
Provide technical consultation and security best-practice documentation to staff.

Key Responsibilities (Mid-Level)

• Incident Response & Triage:
Lead the investigation of complex security alerts escalated from Level 1, determining root causes, scoping the blast radius, and executing rapid containment protocols.

• Threat Hunting & Vulnerability Management:
Conduct proactive threat hunting using endpoint data, network telemetry, and actionable intelligence. Analyze system logs to identify abnormalities and suspicious network signals.

• Security Operations & Tooling:
Configure, fine-tune, and deploy security solutions (e.g., SIEM, EDR, firewalls, and DLP). Author custom detection rules and detection playbooks.

• Risk Management & Compliance:
Conduct enterprise-level risk assessments, enforce adherence to security legislation, and manage system security documentation (e.g., SSPs, ATO lifecycle, and security controls).

• Mentorship & Reporting:
Guide junior SOC/Level 1 analysts, and communicate complex technical risks to executive leadership and IT teams through detailed…