Cyber Engineer: Tools and Infrastructure

GDIT is seeking a Cyber security Engineer with experience in tools and infrastructure support to join our team, supporting the application-level administration of critical systems used by the Office of Cybersecurity Systems (OCS). This role focuses on ensuring the efficient operation, maintenance, and enhancement of digital forensic and cybersecurity toolsets vital to the mission of our Federal Customer. The ideal candidate will possess a strong technical background, hands-on experience with a range of forensic, security, and analysis tools, and the ability to strategically deploy new systems and capabilities to meet the organization's evolving needs.

MEANINGFUL WORK AND PERSONAL IMPACT

In this role you will be responsible for providing technical expertise across an array of specialized software and systems, including Forensics Toolkit (FTK), Magnet Axiom Cyber, FRED physical systems, Palo Alto XSOAR, Splunk, Cellebrite, ExtraHop, and other critical tools used within the infrastructure environment. This role oversees application-level maintenance, manages user accounts, configures systems for optimal functionality, addresses vulnerabilities through rigorous patching, and drives new deployments of value-critical systems.
________________________________________
Responsibilities:
1. System Administration and Maintenance:

• Administer and maintain specialized forensic tools and infrastructure, including Forensics Toolkit (FTK), Magnet Axiom Cyber, FREDs physical systems, and other essential software components used in high-stakes environments.

• Implement application-level patches to protect systems from vulnerabilities and ensure compliance with organizational security requirements.

• Conduct routine maintenance activities to prevent downtime and enable operational stability across analysis servers and forensic tools.

2. Account and User Administration:

• Perform regular account administration for users to facilitate proper access control.

• Collaborate with OCS teams to ensure user roles align with operational and compliance standards.

3. System Configuration and Optimization:

• Apply configuration changes tailored to specific tools (e.g., ExtraHop, Cellebrite, Splunk, and Palo Alto XSOAR) as needed to meet performance benchmarks or add new functionalities.

• Undertake customization and tuning efforts to address emerging operational challenges in the organization’s forensic and security environments.

4. Deployment of New Systems and Capabilities:

• Drive the deployment of new systemic functionalities, such as the rollout of Magnet Axiom Cyber, ensuring robust integration into the existing infrastructure.

• Assist in identifying and implementing new tools to strengthen investigative and analytic capabilities.

5. Support and Collaboration:

• Serve as a point of contact for troubleshooting escalated issues across the toolset environment and ensure timely resolution of problems.

• Collaborate with other IT, security, and forensic specialists to align tool management strategies with broader organizational goals.

WHAT YOU’LL NEED TO SUCCEED:

Bring your technology expertise and drive for innovation to GDIT. The selected candidate must demonstrate in-depth working knowledge and proven hands-on experience with the following tools and systems to qualify for the role. A minimum of 2-6 years of experience with each of the below listed tools is required.

• Forensics Management & Analysis Tools: Forensics Toolkit (FTK), Magnet Axiom Cyber, Cellebrite.

• Cybersecurity Infrastructure Tools: Palo Alto XSOAR, Splunk, ExtraHop.

• Physical and Logical System Implementation: Experience with FREDs (Forensic Recovery of Evidence Devices) and managing their deployment and maintenance.

• General IT Proficiency: Understanding of server environments, analysis platforms, patch management processes, and application security best practices.

• Linux and Windows Operating Systems Proficiency: Certification CompTIA Linux+ at a minimum, ideally at least the LPIC-1/LFCA or equivalent vendor specific certification

• Demonstrable experience in deploying and managing Magnet Axiom Cyber or similar platforms in forensic investigations.

• Proven track record of implementing application-level configurations and patching in a secure and documented manner.

• Strong analytical and problem-solving abilities.

• Excellent communication and interpersonal skills to collaborate effectively in a multidisciplinary team.

• Ability to adapt and respond to fast-changing cybersecurity threats and forensic demands.

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field (or equivalent experience).

• Certifications in relevant technologies such as Splunk Certified Architect, Cellebrite Certified Examiner (CCE), or Palo Alto certifications are preferred.

• Minimum of 3 years experience in a similar role, managing and maintaining both forensic and cybersecurity tools.

• At least one active Cyber certifications (e.g., CISSP, CISM, CEH, GIAC, etc.)

• Location: On-site required

• US Citizenship Required – Must have Active Secret, Top Secret, DOE L, or DOE Q

GDIT IS YOUR PLACE:

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

● Growth: AI-powered career tool that identifies career steps and learning opportunities
● Support: An internal mobility team focused on helping you achieve your career goals
● Rewards: Comprehensive benefits and wellness packages, K with company match, and competitive pay and paid time off
● Community: Award-winning culture of innovation and a military-friendly workplace