Transform technology into opportunity as a Cybersecurity Infrastructure - Lead with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you’ll be at the forefront of innovation and play a meaningful part in improving how agencies operate.
Compensation
The likely salary range for this position is $144,500 - $195,500.
Responsibilities
Configuring, tuning, optimizing, and maintaining critical security infrastructure to safeguard the organization's digital assets against evolving cyber threats.
Overseeing the operation, architecture alignment, and maintenance of essential cybersecurity systems, including Enterprise Firewalls and boundary protection controls.
Administering and optimizing Cloud-Based Internet Isolation (CBII) policies.
Deploying, tuning, and operating IDS/IPS sensors via Security Onion and managing network visibility fabrics using Gigamon TAPs.
Deploying, configuring, and maintaining clustered SIEM (Splunk) environments, search queries, dashboards, and correlation alerts.
Support and maintain the organization’s Threat and Vulnerability Management program, including incident response, vulnerability assessments, threat intelligence, and NIS2 compliance.
Responsibilities
Support and maintain vulnerability detection and mitigation activities
Implement and support the Threat and Vulnerability Management program
Identify, assess, analyse, and manage security vulnerabilities
Track and manage the vulnerability lifecycle
Investigate latest security vulnerabilities and vendor advisories
We are seeking an experienced, hands-on network and infrastructure security engineer to own the operational security, reliability, and continuous improvement of networks across multiple company locations. This role is primarily focused on network engineering and defensive security.
Compensation
The salary range in this posting depends on qualifications and experience. Actual compensation may vary, and this job posting is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee, which is always dependent on relevant experience, qualifications/education, and other factors including work schedule, shift premiums, and overtime.
Responsibilities
Firewall and perimeter security: Administer, harden, monitor, and troubleshoot next-generation firewalls and edge services; manage rule bases, NAT, IPS/IDS, remote access, VPNs, firmware, certificates, and secure management access.
Proactive vulnerability and patch management: Maintain an accurate inventory of network/security devices; track vendor advisories, exposed services, end-of-life systems, configuration drift, and vulnerabilities. Prioritize and coordinate firmware/security updates, validate remediation, and document exceptions.
Segmentation and secure architecture: Design and maintain VLANs, ACLs, inter-VLAN controls, least-privilege access, site-to-site connectivity, and segmentation of user, server, guest, management, and other higher-risk networks. Reduce lateral-movement opportunities.
Switching, wireless, and network operations: Configure and troubleshoot managed switches, routing, DNS/DHCP dependencies, wireless controllers/APs, authentication, and network performance. Understand the security implications of each component.
Detection, response, and resilience: Review firewall/network telemetry and alerts, investigate suspicious traffic and attempted intrusions, support incident containment, validate backups of device configurations, and test recovery procedures.
Infrastructure Security Engineer (Vulnerability Management) 2649User Experience Researchers Pte. Ltd. · Cyberjaya, Malaysia
Network & Infrastructure Security EngineerGleason · Rochester, US