Cyber Engineer: Tools and Infrastructure

Overview

GDIT is seeking a Cyber security Engineer with experience in tools and infrastructure support to join our team, supporting the application-level administration of critical systems used by the Office of Cybersecurity Systems (OCS). This role focuses on ensuring the efficient operation, maintenance, and enhancement of digital forensic and cybersecurity toolsets vital to the mission of our Federal Customer. The ideal candidate will possess a strong technical background, hands-on experience with a range of forensic, security, and analysis tools, and the ability to strategically deploy new systems and capabilities to meet the organization's evolving needs.

In this role you will be responsible for providing technical expertise across an array of specialized software and systems, including Forensics Toolkit (FTK), Magnet Axiom Cyber, FRED physical systems, Palo Alto XSOAR, Splunk, Cellebrite, Extra Hop, and other critical tools used within the infrastructure environment. This role oversees application-level maintenance, manages user accounts, configures systems for optimal functionality, addresses vulnerabilities through rigorous patching, and drives new deployments of value-critical systems.

• System Administration and Maintenance:
  Administer and maintain specialized forensic tools and infrastructure, including Forensics Toolkit (FTK), Magnet Axiom Cyber, FREDs physical systems, and other essential software components used in high-stakes environments. Implement application-level patches to protect systems from vulnerabilities and ensure compliance with organizational security requirements. Conduct routine maintenance activities to prevent downtime and enable operational stability across analysis servers and forensic tools.
• Account and User Administration:
  Perform regular account administration for users to facilitate proper access control. Collaborate with OCS teams to ensure user roles align with operational and compliance standards.
• System Configuration and Optimization:
  Apply configuration changes tailored to specific tools (e.g., Extra Hop, Cellebrite, Splunk, and Palo Alto XSOAR) as needed to meet performance benchmarks or add new functionalities. Undertake customization and tuning efforts to address emerging operational challenges in the organization’s forensic and security environments.
• Deployment of New Systems and Capabilities:
  Drive the deployment of new systemic functionalities, such as the rollout of Magnet Axiom Cyber, ensuring robust integration into the existing infrastructure. Assist in identifying and implementing new tools to strengthen investigative and analytic capabilities.
• Support and
  
  Collaboration:
  
  Serve as a point of contact for troubleshooting escalated issues across the toolset environment and ensure timely resolution of problems. Collaborate with other IT, security, and forensic specialists to align tool management strategies with broader organizational goals.

Bring your technology expertise and drive for innovation to GDIT. The selected candidate must demonstrate in-depth working knowledge and proven hands-on experience with the following tools and systems to qualify for the role. A minimum of 2-6 years of experience with each of the below listed tools is required.

• Forensics Management & Analysis Tools:
  Forensics Toolkit (FTK), Magnet Axiom Cyber, Cellebrite.
• Cybersecurity Infrastructure Tools:
  Palo Alto XSOAR, Splunk, Extra Hop.
• Physical and Logical System Implementation:
  Experience with FREDs (Forensic Recovery of Evidence Devices) and managing their deployment and maintenance.
• General IT Proficiency:
  Understanding of server environments, analysis platforms, patch management processes, and application security best practices.
• Linux and Windows Operating Systems Proficiency:
  Certification CompTIA Linux+ at a minimum, ideally at least the LPIC-1/LFCA or equivalent vendor specific certification
• Demonstrable experience in deploying and managing Magnet Axiom Cyber or similar platforms in forensic investigations.
• Proven track record of implementing application-level configurations and patching in a…