General Dynamics IT
Cyber Security Engineer
Huntsville, AL · On-site · Senior
- Discipline
- Hardware
- Industry
- Defense
- Constraints
- Citizenship required by contract TS/SCI
Spec sheet
Automatically summarized from the employer’s posting. Check the original description below for full requirements.
Cyber and IT Risk Management / CSSP
Cybersecurity Engineer at General Dynamics IT in Huntsville, AL, leading cyber defense, incident response, threat hunting, forensics, and RMF activities. Requires 7+ years in DoD/federal cyber engineering, CISSP, and knowledge of RMF, SIEM/EDR, Elastic Stack, ACAS, and TS/SCI readiness.
$111,155–$150,385 / year · Day shift · 10% travel · 7+ years · Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field
Required
- CISSP
- Extensive experience with SIEM/EDR platforms
- Elastic Stack
- ACAS
- cyber defense analytics
- RMF
- incident response processes
- forensic reports
Preferred
- ISSEP/ISSEP preferred
- GREM/GCFA/CEH/GCIA/GCED preferred
- DoD 8140/8570 certifications
- GDIT on-site Alabama
- PMP preferred
Benefits
- medical
- 401(k)
- vacation
- sick
- holidays
- paid parental
- life insurance
Employer description
Type of Requisition:
Pipeline
Clearance Level Must Currently Possess:
Interim Secret
Clearance Level Must Be Able to Obtain:
Top Secret/SCI
Public Trust/Other Required:
None
Job Family:
Cyber and IT Risk Management
Job Qualifications:
Skills:
Cyber Defense, Cyber Operations, Forensic Sciences, Information Assurance, Information System SecurityCertifications:
NoneExperience:
7 + years of related experienceUS Citizenship Required:
Yes
Job Description:
Seize your opportunity to make a personal impact as a Cybersecurity Engineer. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.
At GDIT, people are our differentiator. You will help ensure today is safe and tomorrow is smarter. Our work depends on a Cybersecurity Engineer joining our team as a key technical authority supporting Cybersecurity Service Provider (CSSP) and Defensive Cyberspace Operations (DCO). This role is critical in safeguarding global digital infrastructure, ensuring cyber resiliency across mission systems that support detection, tracking, and interception of threats. The Cybersecurity Engineer is the Technical Lead that elevates the mission by guiding analysts, engineers, and responders to meet strict operational timelines, improve detection fidelity, and strengthen defensive capabilities against sophisticated adversaries.
HOW THE CYBERSECURITY ENGINEER WILL MAKE AN IMPACT
Technical Leadership & OversightServe as the senior technical authority across cybersecurity functions including incident response, cyber defense, threat hunt, forensics, vulnerability management, and threat emulationProvide SME-level guidance to ensure all technical activities meet DoD/client cybersecurity requirements, CJCSM 6510.01B, and CSSP governance standardLead technical planning, coordination, and execution for mission-essential operational requirementsOperational Support & Mission ExecutionOversee 24/7 cyber defense monitoring, detection, and incident classification activities under Cyberspace Domain AwarenessEnsure rapid response performance, maintaining CSSP Mean Time to Respond (MTTR) requirementsLead teams performing vulnerability analysis, ACAS posture rollups, IAVM trending, PPSM compliance assessments, and endpoint security rollupsOversee forensic analysis capability, ensuring adherence to NIST SP 800‑86, maintaining chain‑of‑custody, and delivering full forensic case reportsThreat Intelligence & Proactive DefenseGuide intelligence-driven threat hunt missions; correlate OSINT/CSINT with internal telemetry to identify advanced adversary TTPsLead the development of analytics, rulesets, and countermeasures for CSSP toolsets (SIEM/EDR/Elastic Stack)Support Cyber Threat Emulation activities using GFE toolsets to test defensive posture against realistic adversary behaviors.Technical Documentation, Quality & ComplianceOversee technical documentation including SOPs, TTPs, CTOs, COAs, forensic reports, vulnerability reports, and training materials.Ensure all outputs meet DoD plain-language standards and are delivered in Government-approved formats.Support RMF lifecycle activities including SSP updates, control assessments, POA&M management, audit log review, and incident response testing.Tooling, Automation & InnovationLead development and refinement of Elastic dashboards, data enrichment pipelines, anomaly detection models, and threat analytics.Oversee Cybersecurity Business Intelligence Dashboards on unclassified and classified networks, ensuring daily refreshed, validated data pipelines.Drive automation and testing strategies to evolve defensive operations toward proactive, data-driven cyber defense.WHAT YOU’LL NEED TO SUCCEED:
Education:Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related fieldRequired Certifications:CISSP – Certified Information systems Security Professional requiredISSAP – Information Systems Security Architecture Professional strongly preferredISSEP – Information Security Systems Engineering Professional preferredCISM – Certified Information Security Manager preferredGIAC Certifications GCIH, GCIA, GCED preferredCCSP – Certified Cloud Security Professional preferredPMP- Project Management Professional preferredRequired Experience:7+ years of cybersecurity engineering or cyber operations experience in DoD or federal environments3+ years in a technical leadership roleDemonstrated experience leading incident response, threat hunting, vulnerability management, or forensic analysis teamsRequired Technical Skills:Extensive experience with SIEM/EDR platforms, Elastic Stack, ACAS, and cyber defense analyticsStrong knowledge of RMFDeep understanding of cyber incident response processes and detection engineeringExperience developing SOPs, TTPs, dashboards, forensic reports, and cyber analyticsSecurity Clearance Level:Secret clearance requiredTop Secret preferredRequired Skills and Abilities:Strong leadership and team‑coordination skills across diverse cyber and CSSP disciplinesExcellent communication skills for both technical and executive audiencesStrong analytical and problem‑solving abilities under pressureAbility to work across multiple classification levels and sensitive environmentsPreferred Skills:GIAC, Elastic, or DoD 8140/8570 certifications (GREM, GCFA, GCTI, CEH, CISSP, CCSP, etc.)Experience in CTE environments or advanced adversary simulation.Prior leadership experience within an accredited CSSPExperience overseeing dashboard/data pipeline engineeringLocation:Alabama on‑site; situational telework only when authorized.
The likely salary range for this position is $111,155 - $150,385. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:
40
Travel Required:
Less than 10%
Telecommuting Options:
Onsite
Work Location:
USA AL Huntsville
Additional Work Locations:
Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
Our Identity Verification Process:
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work:
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events atgdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
Stateside Spec lists roles for engineering teams in the United States. Work-authorization notes come from the employer. We do not guarantee visa policy. Apply off-site. Report an issue with this listing View employer source