Cybersecurity Manager

Overview

Job Description

We are GDIT. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that’s important.

GDIT is your place. You make it your own by embracing autonomy, seizing opportunity, and being rested to deliver your best every day.

We think. We act. We deliver. There is no challenge we can’t turn into opportunity. Our work depends on a Cyber Security Manager joining our team to support Navy Enterprise Tactical Training Network (NETTN) activities. They shall provide cybersecurity operations in support of this effort.

• Supports vulnerability management, risk management framework assessment and authorization, network security, cybersecurity incident response, Host Base Security System support, information system auditing, patching support, cross domain solution support, cybersecurity configuration management and annual cybersecurity inspections.
• Determines enterprise information assurance and security standards for authentication and authorization.
• Develops and implements information assurance/security standards and procedures.
• Serves as the project manager to lead the implementation of a digital identity and multifactor authentication effort for multiple web applications.
• Coordinates, develops, and evaluates security programs for an organization.
• Recommends information assurance/security solutions to support customers’ requirements.
• Establishes and satisfies information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.
• Performs analysis, design, and development of security features for system architectures.
• Reviews and assesses current application authentication topologies and develops a recommended path forward to implement a centralized federated authentication solution.
• Leads the development of the design documentation associated with the to-be federated authentication topology.
• Assists with the development and implementation of a Zero-Trust architecture roadmap.
• Ensure that cyberspace workforce (CSWF) personnel are identified, categorized, certified, qualified and/or otherwise competent for their assigned tasking IAW all applicable DoW directives, instructions, manuals and policies and updates thereto, including the most current version of SECNAV M-5239.2 and deliver a report identifying all of its certified CSWF personnel IAW CDRL A008 Cybersecurity Workforce (CSWF) Report.
• Institute a scan–remediate–rescan and validation methodology covering all networked and stand-alone systems utilizing the DISA Assured Compliance Assessment Solution or other current DoW mandated tool.
• Develop documented Vulnerability Management procedures establishing a methodology for scan–remediate–rescan and quarterly STIG validation and maintain the procedures in IMS.
• Ensure all networks and systems are covered by automated or manual authenticated scans and remediate or mitigate any vulnerabilities.
• Scan assets on a weekly basis, at a minimum, to ensure remediation efforts are successfully implemented and perform asset discovery scans at minimum on a monthly basis.
• Develop documented patch management procedures establishing a methodology for patching and confirming patch management.
• Perform duties as assigned.

• Seven (7) years of information technology experience with DoW government contracting efforts.
• Five (5) years of managerial experience with DoW government contracting efforts, including leading a team of at least 20 cybersecurity professionals.
• Experience managing dispersed workforce in support of securing an integrated network as well as a dispersed group of networks.
• Bachelor’s degree in computer science, Information Systems, Software Engineering, Business, or other related discipline with 8 years of increasingly responsible and relevant experience in defining security requirements. Without a degree at least 12 years of relevant experience is required.
• Knowledge of computer communications systems and networks that are used to…