Vnoc Incident Management Lead

Type of Requisition:
Pipeline
Clearance Level Must Currently Possess:
Secret
Clearance Level Must Be Able to Obtain:
None
Suitability:
Public Trust/Other Required:
None
Job Family:
Cyber Security
Job Qualifications:
Skills:
Incident Management, Incident Reporting, Incident Response
Certifications:
CompTIA Network Security Professional - CompTIA - CompTIA - Security+
Experience:
5 + years of related experience
US Citizenship Required:
Yes
Job Description:
The scope of the IT GEMS contract includes a full range of information technology (IT) services which include necessary hardware, software, and ancillary, components to support enterprise-level programs and environments. Support service areas include program management support, policy, procedures, and operations support, IT core services support, security compliance, customer and client services support, transformational IT support, and application migration support.
HOW A CYBER SECURITY ANALYST ADVISOR WILL MAKE AN IMPACT
Incident Management Lead:

• Supports the VNOC and collaborates with the DMDC Consolidated Contact Center (CCC) and Cyber Incident Response Team on Incident Management.
• Leads our Incident Management team and maintains our ITIL-based ITSM4Gov Incident Management program, ensuring alignment with DMDC's SOP. Continuously monitors DMDC's enterprise infrastructure to ensure proactive detection and response of incidents. Handles incidents as Severity 1 until further assessment determines otherwise to ensure swift response to critical issues.
• Acts as an incident manager within 10 minutes of incident notification, ensures technical experts are engaged within 30 minutes and on-site support is dispatched within one hour, if required. Leads and coordinates incident response efforts around the clock, ensuring incidents are managed and resolved 24/7/365 to maintain the availability and reliability of IT services.
• Leads the development of After Action Reports (AARs) within 7 days of incident resolution and supports the analysis of the incident response process as part of our CSI2 approach to enhance future Incident Management.

Incident Reporting Lead:

• Leads Incident Reporting and is a key member of the Incident and Problem Management team and responsible for ensuring all cyber incidents are reported to the DMDC Incident Response (IR) team within one hour of discovery and every 24 hours until the incident is closed.
• Collaborates with the DMDC IR team and VNOC Incident Managers and creates and maintains comprehensive incident reports that detail the incidents timeline, actions taken, resources involved, and outcomes.
• Contributes to the continuous improvement of Incident Management processes with our CSI2 program, ensuring lessons learned from incidents are documented and approved enhancements are incorporated into future response strategies and applicable SOPs, TTPs, and KBAs.

WHAT YOU'LL NEED TO SUCCEED:

• Education/Experience: 5-8+ years of experience, BA/BS or equivalent years of experience
• Required Technical Skills:
  • IAT II
  • CompTIA Security+
  • For Incident Reporting Lead: Certified Ethical Hacker (CEH) or equivalent
• Security Clearance Level: Active DOD Secret
• Location: Onsite - San Antonio, TX
• US Citizenship Required

GDIT IS YOUR PLACE:

• Full-flex work week to own your priorities at work and at home
• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays

Scheduled Weekly Hours:
40
Travel Required:
10-25%
Telecommuting Options:
Onsite
Work Location:
USA TX San Antonio
Additional Work Locations:
We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.
We connect people with the most impactful client missions, creating an unparalleled work experience that allows them to see their impact every day. We create opportunities for our people to lead and learn simultaneously. From securing our nation's most sensitive systems, to enabling digital transformation and cloud adoption, our people are the ones who make change real.
GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.