Cybersecurity Engineer Sr Principal

Type of

Requisition :
Regular Clearance Level Must Currently Possess:
Top Secret/SCI Clearance Level Must Be Able to Obtain:
Top Secret/SCI Public Trust/Other

Required:

None Job Family:
Cyber and IT Risk Management

Job Qualifications:

Skills:

Active Directory (AD), Redhat Linux Server, Splunk Administration, Tenable Security Center

Certifications:

None

Experience:

10 + years of related experience US Citizenship

Required:

Yes

Job Description:

CYBERSECURITY ENGINEER SR PRINCIPAL Advance your career while impacting our national security in cyber as a Cybersecurity Engineer Sr Principal e, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

MEANINGFUL WORK AND PERSONAL IMPACT As a Cybersecurity Engineer Sr Principal, the work you’ll do at GDIT will be impactful to the mission of our customer’s classified commercial cloud environment. You will play a crucial role in engineering and operating security controls for a classified secure workstation enclave, ensuring continuous monitoring, and compliance for mission-critical systems. Support and lead configuration, hardening, and updates of Linux operating systems, directly contributing to the secure operation of the enclave.

Collaborate with enclave engineers, system administrators, and vendors to administer and maintain core security applications (SIEM, vulnerability scanning, endpoint protection, insider threat tooling) that safeguard the environment. Drive continuous monitoring and incident response activities by validating telemetry, triaging alerts, investigating incidents, and supporting RMF-aligned vulnerability management, endpoint security, and auditing. Utilize Red Hat/Linux, Splunk, Tenable, Trellix, Teramind, and Microsoft Active Directory/Group Policy to implement and validate security controls, maintain visibility, and provide actionable insights into the enclave’s security posture.

Configure, harden, and update Linux operating systems within the secure enclave. Administer and monitor core security tools (Splunk SIEM, Tenable, Trellix, Teramind), ensuring telemetry, policies, and integrations function as intended. Triage and investigate security alerts and incidents in alignment with the Incident Response Plan. Oversee vulnerability and STIG scanning (host inventory, scan policies, and results) and coordinate remediation with the engineering team.

Ensure complete endpoint visibility and policy enforcement across hosts and insider threat tooling. Support RMF Continuous Monitoring activities, including vulnerability management, endpoint security, auditing, and security alert monitoring. Contribute to security documentation, control implementation statements, assessment artifacts, and POA&M mitigation activities.

• Education:
  
  Bachelor of Arts/Bachelor of Science
• Experience:
  
  10+ years of related experience
• Technical skills:
  Hands-on experience with Red Hat operating system and other Linux distributions Hands-on engineering experience administering and maintaining security operations using Splunk (SIEM), Tenable (vulnerability management), and Trellix (endpoint security) Hands-on experience with Teramind for insider threat monitoring Understanding of Microsoft Active Directory and implementing controls via Group Policy Knowledge of the complete NIST SP 800 series (especially 800-37, 800-53, 800-30) and risk management principles
• Security clearance level:
  Active Top Secret
• Role requirements:
  
  Onsite
  -McLean, VA Must be DoD 8140 / 8570.01-M compliant

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support:
  An internal mobility team focused on helping you achieve your career goals
• Rewards:
  Comprehensive…