General Dynamics Information Technology · 5 hours ago
Cybersecurity Manager
General Dynamics Information Technology (GDIT) is a global technology and professional services company that supports complex government, defense, and intelligence projects. They are seeking a Cybersecurity Manager to provide cybersecurity operations for the Navy Enterprise Tactical Training Network, including vulnerability management, risk management, and incident response.
Artificial Intelligence (AI)Cloud ComputingConsultingCyber SecurityInformation Technology
Responsibilities
Determines enterprise information assurance and security standard for authentication and authorization
Develops and implements information assurance/security standards and procedures
Serves as the project manager to lead the implementation of a digital identity and multi-factor authentication effort for multiple web applications
Coordinates, develops, and evaluates security programs for an organization
Recommends information assurance/security solutions to support customers’ requirements
Establishes and satisfies information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands
Performs analysis, design, and development of security features for system architectures
Review and assesses current application authentication topologies and develops a recommended path forward to implement a centralized federated authentication solution
Leads the development of the design documentation associated with the to-be federated authentication topology
Assists with the development and implementation of a Zero-Trust architecture roadmap
Shall ensure that its cyberspace workforce (CSWF) personnel are identified, categorized, certified, qualified and/or otherwise competent for their assigned tasking IAW all applicable DoD directives, instructions, manuals and policies and updates thereto, including the most current version of SECNAV M-5239.2 and deliver a report identifying all of its certified CSWF personnel IAW CDRL A008 Cybersecurity Workforce (CSWF) Report
Shall institute a scan– remediate–rescan and validation methodology covering all networked and stand-alone systems utilizing the DISA Assured Compliance Assessment Solution or other current DoD mandated tool
Develop documented Vulnerability Management procedures establishing a methodology for scan–remediate–rescan and quarterly STIG validation and maintain the procedures in IMS
Shall ensure all networks and systems are covered by automated or manual authenticated scans and remediate or mitigate any vulnerabilities
Scan assets on a weekly basis, at a minimum, to ensure remediation efforts are successfully implemented and perform asset discovery scans at minimum on a monthly basis
Shall develop documented patch management procedures establishing a methodology for patching and confirming patch management
Perform duties as assigned
Qualification
Required
Top Secret clearance level must currently possess
Top Secret clearance level must be able to obtain
7 + years of related experience
US Citizenship Required: Yes
Information Technology (IT), Security Requirements, Security Standards
Seven (7) years of information technology experience with DoW government contracting efforts
Five (5) years of managerial experience with DoW government contracting efforts, including leading a team of at least 20 plus cybersecurity professionals
Experience managing dispersed workforce in support of securing an integrated network as well as a dispersed group of networks
Bachelor's degree in computer science, Information Systems, Software Engineering, Business, or other related discipline with 8 years of increasingly responsible and relevant experience in defining security requirements. Without a degree at least 12 years of relevant experience is required
Knowledge of computer communications systems, and networks that are used to support Navy and Joint training events
Familiarity with ISO 9000:2015 Quality Management System
6+ years of hands-on cybersecurity experience, including the NIST Risk Management Framework (800-63-3), architecture, digital identity, federated authentication, and penetration testing, firewalls, encryption, security monitoring, event and anomaly analysis and intrusion detection/prevention
3+ years of hands-on experience with the development federated authentication solutions and digital identity management
3+ years of hands-on experience leading a team of Cyber Security professionals
3+ years' experience in the design and implementation of SAML and Open Connect authentication methodologies
Hands-On experience with the implementation of Zero-Trust principles applicable to business (web) applications
Experience in Microsoft and Linux including Red Hat web server platforms
Required certifications in accordance with DODI-8140/8570: CISSP or CISM or CCSP or GCIH or GCIA or GSEC or OSCP or CHFI or CEH
Preferred
Experience with Anti-Virus, Intrusion Detection/Protection Systems, Firewalls, Active Directory, Vulnerability Assessment tools and other security tools found in large network environments
Experience with technologies, including ADFS, Ping Federate, SAML and Open Connect Authentication, Azure or AWS cloud application experience
ITIL v3 or v4 certification
Benefits
Comprehensive benefits and wellness packages
401K with company match
Competitive pay and paid time off
Full flex work weeks
Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
Short and long-term disability benefits
Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance
Company
General Dynamics Information Technology
General Dynamics Information Technology is an IT consulting company that specializes in cyber security, AI, and quantum computing. It is a sub-organization of General Dynamics.
Funding
Current Stage
Late StageRecent News
Company data provided by crunchbase