"Alerted.org

**Req ID:** RQ210680

**Type of Requisition:** Regular

**Clearance Level Must Be Able to Obtain:** None

**Public Trust/Other Required:** BI Full 6C (T4)

**Job Family:** Cyber and IT Risk Management

Skills:

Cyber Defense,Cyber Threat Intelligence,Threat Detection

Certifications:

CompTIA Security+ CE | CompTIA - CompTIA

Experience:

1 + years of related experience

US Citizenship Required:

Yes

Job Description:

We are seeking a **Tier 2 Cybersecurity Analyst** to join our dynamic **Cyber Security Operations Center (CSOC)** . The ideal candidate will be responsible for advanced threat detection, incident response, and security event analysis across the enterprise environment at the **Department of Education** . This role serves as the escalation point for Tier 1 analysts and plays a key role in containing threats, improving detection capabilities, and hardening defenses.

You will work closely with other cybersecurity, infrastructure, and threat intelligence teams to investigate complex incidents, refine detection rules, and enhance **SOC** processes to strengthen the organization's security posture.

Key Responsibilities

+ Perform in-depth triage and analysis of alerts escalated from Tier 1, including endpoint, network, and cloud events.

+ Investigate and respond to malware infections, phishing attempts, lateral movement, and data exfiltration indicators.

+ Conduct root cause analysis and coordinate containment, eradication, and recovery efforts.

+ Assist in tuning tools within our security stack and playbook automation to reduce false positives and improve efficiency.

+ Maintain incident response documentation, procedures, and post-incident reports.

+ Collaborate with Threat Intelligence and Tier 3 teams to refine detection content based on emerging threats.

+ Assist in vulnerability management and remediation verification.

+ Provide guidance and mentorship to Tier 1 analysts on investigations and best practices.

+ Participate in on-call rotation.

Required Qualifications

Education:

Technical Training, Certification(s), or Degree

Experience:

1+ years of experience in a Security Operations Center or incident response role.

**Certification:** CompTia Security+ desired, but other relevant security certifications may be considered in lieu of Security+.

Skills:

+ Strong knowledge of Splunk.

+ Hands-on experience with Defender for Endpoint.

+ Solid understanding of network protocols, system logs, and threat actor TTPs (MITRE ATT&CK framework).

+ Proficiency in analyzing Windows, Linux, and cloud environments for indicators of compromise.

+ Strong analytical, documentation, and communication skills.

Preferred Qualifications

+ Experience with Microsoft Defender XDR, Palo Alto Firewall, & Tenable

+ Familiarity with Palo Alto Cortex XSOAR.

+ Exposure to threat hunting and proactive detection engineering.

+ Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent work experience) nice to have.

+ Additional experience in a Security Operations Center or incident response role nice to have.

US Citizenship Required

**Location:** Hybrid at GDIT's Integrated Technology Center in Bossier City, LA. Participation in an on-call rotation will be required.

What We Offer

+ Competitive salary and performance-based bonuses.

+ Comprehensive health, dental, and vision benefits.

+ Paid time off, holidays, and flexible scheduling.

+ Opportunities for training, certification reimbursement, and career advancement.

+ A collaborative environment that values innovation, mentorship, and continuous learning.

The likely salary range for this position is $65,250 - $86,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.

Join our Talent Community to stay up to date on our career opportunities and events at https://gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans