Cybersecurity Analyst SME

Position Overview GDIT is seeking a Security Operations Center Manager to support the Defense Manpower Data Center (DMDC) Cybersecurity, Privacy, Records, Information Management, and Environments Support (Cyber Primes) program. As a SOC Manager you will be part of a team responsible for securing the operations for DMDC and DHRA’s networks via the SOC. The SOC is the central hub of cybersecurity event monitoring, focused on incident detection, triage, and analysis with the object of providing continuous monitoring and event analysis to quickly identify security concerns and incidents in a timely manner. The SOC team monitors, triages, and analyzes all security alerts, and escalates to Incident Response within the DHRA area of responsibility. Cyber events are triggered 24‑hours a day, 7‑days a week, 365‑days a year (24x7x365). Key Responsibilities Lead the SOC team, coach and provide guidance to less experienced professionals. Investigate, analyze, and respond to cyber incidents within a network environment. Use data from cyber defense tools (ID Sa alerts, firewalls, network traffic logs) to investigate and mitigate threats. Interpret, analyze, and report all events and anomalies in accordance with computer network directives, initiating, responding, and reporting discovered events. Evaluate, test, recommend, coordinate, monitor, and maintain cybersecurity policies, procedures, and systems, including access management for hardware, firmware, and software. Ensure that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with federal cybersecurity standards. Identify security risks and exposures, determine causes of security violations, and suggest procedures to halt future incidents and improve security. Develop techniques and procedures for conducting cybersecurity risk assessments and compliance audits, evaluating hardware, firmware, and software for possible impact on system security, and investigating and resolving security incidents such as intrusions, fraud, attacks, or leaks. Develop and maintain Tactics, Techniques and Procedures (TTPs) for the SOC. Maintain and provide process improvements on SOC processes and procedures. Manage cyber incidents including triage, communication, documentation, and response in accordance with DoW regulations and policies. Communicate and provide summaries, including presentations to all levels of leadership. Manage tasks in accordance with DoW government contracts. Required Qualifications US citizenship required for contract. One of the following certifications: CCNA, CySA+, CFR, GCFA, GCIA, or GICS. Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experience. 10+ years of experience in cybersecurity. Experience leading teams or tasks in a SOC environment. Desired Qualifications Security+ or CISSP certification. DoD Top Secret clearance (Active DOW clearance). Experience in federal government cybersecurity environments. Location Seaside, CA Benefits Benefits and wellness packages are provided by GDIT, including 401K with company match and paid time off. #J-18808-Ljbffr