Cyber Security Analyst Tier III
Not Disclosed•Full-TimeOn-site
location_onOn-site
About GDIT
We are GDIT, a global technology and professional services company delivering consulting, technology, and mission services to major agencies across the U.S. government, defense, and intelligence community. With 26,000 experts operating across 50 countries, we harness deep expertise and advanced technology to create immediate value and deliver solutions at the edge of innovation. Our mission is to create a safer, smarter world by driving digital modernization, AI/ML, Cloud, and Cyber capabilities.
About the Role
As a senior member of the SOC team supporting the Virginia Information Technology Agency (VITA), you will serve as the primary escalation authority for high-severity security incidents. This Tier III analyst role owns the full escalation chain, guiding complex investigations from initial triage through containment, remediation, and post-incident review. You will pivot across identity, endpoint, network, email, cloud, and SaaS telemetry to drive effective responses to the full spectrum of cyberattacks, including DDoS, malware, phishing, and ransomware.
A core function of this position is building and maintaining operational Splunk dashboards, automated detection workflows, and correlation searches that significantly improve SOC efficiency and threat visibility. You will bring deep hands-on experience in advanced Splunk usage, providing critical threat hunting and incident response expertise to the team. Beyond technical execution, you will mentor junior analysts, document runbooks and playbooks, and contribute to continuous detection improvements and post-incident retrospectives.
Our Culture and Benefits
At GDIT, the mission is our purpose, and our people are at the center of everything we do. We foster a culture of innovation and offer a military-friendly workplace where you can grow your career. Our "GDIT IS YOUR PLACE" philosophy includes:
- Growth: Access to AI-powered career tools that identify learning opportunities and career steps.
- Support: An internal mobility team dedicated to helping you achieve your career goals.
- Flexibility: A full-flex work week to help you own your priorities at work and at home.
- Community: An award-winning culture that values diversity and inclusion.
We provide comprehensive benefits including medical, dental, and vision plans, a 401(k) with company match, and a variety of paid time off options to encourage work-life balance.
Hiring Process and Application
This position is located onsite at GDIT's Integrated Technology Center in Bossier City, LA. To apply, please visit our Talent Community at gdit.com/tc to stay up to date on career opportunities and events. We are an Equal Opportunity Employer and consider qualified applicants regardless of background, including individuals with disabilities and protected veterans.
Work location
Work model: On-site
On-site
Key Responsibilities
- check_circleLead complex incident response investigations across identity, endpoint, network, and cloud telemetry
- check_circleBuild and maintain Splunk dashboards, automated detection workflows, and correlation searches
- check_circleWrite and maintain SPL searches, scheduled reports, and lookup-driven workflows using Python or PowerShell
- check_circleMentor Tier I and II analysts and document post-incident retrospectives and lessons learned
- check_circleConduct malware analysis to correlate events and document malicious actor actions in customer networks
- check_circleDetect cyberattacks such as DDoS, malware, phishing, and ransomware across multiple capabilities
- check_circleAlign detection rules and logging with NIST, PCI DSS, HIPAA, and SOX compliance frameworks
- check_circleTriage security events, prioritize incidents, and escalate high-severity threats per established runbooks
Requirements
- verified8 or more years of experience in cybersecurity operations
- verifiedSplunk experience — advanced SPL, dashboard development, automated alerting, and correlation search creation
- verifiedCyberArk experience — privileged access management in a government or enterprise SOC environment
- verifiedQualifying certification to meet DoW 8140/DCWF CSSP Analyst requirements within 6 months of start: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, or PenTest+
- verifiedWorking knowledge of scripting (Python, PowerShell, or Bash)
Benefits & Perks
check_circle401(k) plan with company matchcheck_circleMedical, dental, and vision plan optionscheck_circleHealth Savings Accounts (HSA) with select medical planscheck_circleFull flex work weeks for work/life balancecheck_circlePaid time off including vacation, sick, personal time, holidays, parental, military, bereavement, and jury duty leavecheck_circleShort and long-term disability benefitscheck_circleLife, accidental death and dismemberment, and personal accident insurancecheck_circleCritical illness and business travel accident insurance
Similar Job Opportunities
Frequently asked questions about Cyber Security Analyst Tier III at General Dynamics Information Technology
What does a Cyber Security Analyst Tier III at General Dynamics Information Technology do?expand_more
Day-to-day, the Cyber Security Analyst Tier III at General Dynamics Information Technology will lead complex incident response investigations across identity, endpoint, network, and cloud telemetry; build and maintain splunk dashboards, automated detection workflows, and correlation searches; write and maintain spl searches, scheduled reports, and lookup-driven workflows using python or powershell; and mentor tier i and ii analysts and document post-incident retrospectives and lessons learned.
What are the requirements for this Cyber Security Analyst Tier III role?expand_more
To qualify for the Cyber Security Analyst Tier III at General Dynamics Information Technology position, applicants should have: 8 or more years of experience in cybersecurity operations; Splunk experience — advanced SPL, dashboard development, automated alerting, and correlation search creation; CyberArk experience — privileged access management in a government or enterprise SOC environment; Qualifying certification to meet DoW 8140/DCWF CSSP Analyst requirements within 6 months of start: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, or PenTest+; and Working knowledge of scripting (Python, PowerShell, or Bash).
Where is the Cyber Security Analyst Tier III role at General Dynamics Information Technology located?expand_more
Cyber Security Analyst Tier III at General Dynamics Information Technology is based in On-site. This is a on-site role.
Is this Cyber Security Analyst Tier III job remote, hybrid, or on-site?expand_more
General Dynamics Information Technology has listed this Cyber Security Analyst Tier III role as on-site.
How much experience is required for this Cyber Security Analyst Tier III role?expand_more
Cyber Security Analyst Tier III at General Dynamics Information Technology typically requires 8+ years of relevant experience at the senior level.
What skills do you need for the Cyber Security Analyst Tier III role at General Dynamics Information Technology?expand_more
Key skills for Cyber Security Analyst Tier III at General Dynamics Information Technology include Cyber Defense; Security Information And Event Management (siem); Security Operations; Security Tools; Splunk; Python; Powershell; and Bash.
What category does the Cyber Security Analyst Tier III role belong to?expand_more
Cyber Security Analyst Tier III at General Dynamics Information Technology is part of the it job category on Recrutus.
About General Dynamics Information Technology
GD Information Technology specializes in delivering technology-driven solutions for federal agencies, defense organizations, and intelligence entities across the United States. Based in Falls Church, Virginia, the company operates within the IT services and consulting industry, focusing on digital modernization, artificial intelligence, cloud infrastructure, cybersecurity, and application development. With a workforce of 30,000 professionals, GDIT provides mission-critical services to government clients, leveraging advanced technologies to address complex operational challenges. The company maintains an operational presence in more than 50 countries, supporting clients through innovation and expertise rooted in over five decades of experience. As a division of General Dynamics, a global aerospace and defense corporation, GDIT aligns its work with the strategic priorities of public-sector partners to advance security and efficiency in evolving technological landscapes.
Browse more roles: All General Dynamics Information Technology jobs, it jobs on Recrutus.