Network Cybersecurity Engineer; Palo​/Cisco

CYBERSECURITY ENGINEER SENIOR / ANALYST

CYBERSECURITY ENGINEER SENIOR / ANALYST

Advance your career while impacting our national security in cyber as a Cybersecurity Engineer Senior e, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. Own your career as a Cyber Security Engineer/Analyst ’ll have the opportunity to build strong lines of cyber defense using cutting-edge technologies. Your work in cyber security at GDIT will have an impact on securing our clients’ missions and ensuring we anticipate the threats of tomorrow.

MEANINGFUL WORK AND PERSONAL IMPACT

As a Cybersecurity Engineer, the work you’ll do at GDIT will be impactful to the mission of our Federal, Intelligence and Defense customers. You will play a crucial role in supporting GDIT’s ability to conduct internal research and development (IR&D) building Digital Accelerators, Platforms and Mission Solutions within Emerge Labs. Emerge Labs is a multi-tenant, hybrid, multi-cloud lab environment with physical datacenter spaces located at our Falls Church, VA Headquarters campus.

As a Cybersecurity Engineer, you will be responsible for defending GDIT’s enterprise, R&D, lab, and program environments through the deployment, configuration, and operation of advanced cloud-native, network, and endpoint security tools. This role is operationally focused supporting secure, agile mission delivery across traditional IT, hybrid cloud, containers, and emerging AI workloads assessments. You will apply deep technical expertise in firewall & threat management, containerized workloads, and cloud-native defense tooling while collaborating with engineers, ISSM, ISSOs, and security leadership to maintain compliance with NIST 800-171 and protect mission-critical systems.

You will apply deep technical expertise in network defense, firewall management, and threat management while collaborating with engineers, ISSM, ISSOs, and security leadership to maintain compliance with NIST SP 800-171 and protect mission-critical systems.

This position requires strong hands-on skills to effectively identify, assess, and manage risks across information systems. You will play a central role in daily security operations and oversight, ensuring the security posture of systems remains resilient. This role requires hand-on knowledge of cybersecurity network and application defense focused on firewalls, web application firewalls (WAF), SASE, and cloud native cybersecurity, TLS, and FIPS/PQC implementation.

The role will also lead and contribute to the successful rollout and operationalization of GDIT’s Enterprise Strategy through the participation in or support of Centers of Excellence (COEs), pursuit teams, Digital Accelerators, and Solution Partner Program.

• Administer, configure, and optimize Cisco ASA/FTD firewalls, Cisco Secure Firewall Management Center (FMC), and Palo Alto Networks NGFWs for perimeter defense, VPN enforcement, and secure segmentation.
• Deploy, configure, and operate cloud-native security services including AWS Security Hub, Inspector, Guard Duty, and Cloud Trail, integrating with SIEMs and automated workflows for real-time risk management.
• Support container and Kubernetes security through secure image baselining, runtime monitoring, vulnerability scanning, and policy enforcement across hybrid and cloud environments.
• Perform AI/ML and RAG security assessments, ensuring responsible use of AI by evaluating data exposure risks, model integrity, and secure API integration.
• Design, implement, and enforce firewall policies, intrusion prevention rules, and threat signatures to block malicious traffic, secure remote access, and defend against APTs and insider threats.
• Conduct proactive network and cyber defense operations, including traffic inspection, packet capture analysis, and dynamic threat hunting.
• Operate and tune Splunk SIEM for log aggregation, correlation, and advanced analytics; integrate with threat intelligence for faster incident triage.
• Deploy and manage Crowd Strike Falcon EDR for endpoint protection and Qualys for vulnerability scanning, remediation, and…