Job Description

Public Trust: MBI (T2)

Requisition Type: Regular

Your Impact

Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being of U.S. citizens.

Job Description

GDIT is seeking an Azure Cybersecurity Analyst to implement, manage, and continuously improve security operations for a FedRAMP Moderate and HIPAA-compliant Azure environment. This hands-on role works closely with the Cybersecurity Architect and Healthcare Enterprise Architect to operationalize the security architecture, perform monitoring and remediation, and maintain compliance through active defense and control validation.

The Azure Cybersecurity Analyst will be responsible for daily security monitoring, vulnerability remediation, POA&M management, and network protection activities using Microsoft Sentinel, Defender, Purview, and Azure Firewall to protect mission-critical healthcare systems and data.

This role is fully remote!

Responsibilities

• Perform security control assessments to evaluate compliance with FedRAMP, HIPAA, and NIST 800-53 frameworks.
• Document findings, risks, and remediation recommendations in POA&M (Plan of Action & Milestones) reports.
• Conduct continuous monitoring of security posture, identifying compliance drift and control gaps.
• Validate remediation efforts, patching, and vulnerability management activities across cloud and on-prem environments.
• Collaborate with engineering, infrastructure, and compliance teams to ensure controls are implemented effectively.
• Support audit readiness and provide evidence for external assessments and certifications.
• Develop and maintain security assessment procedures and reporting templates for consistency and accuracy.

Required Qualifications

• Bachelor’s degree and 3+ years of experience in cybersecurity, compliance, or risk management.
• Strong knowledge of Microsoft Azure security services (Sentinel, Defender for Cloud, Defender for Endpoint, Azure Firewall).
• Proven experience with security control assessments , POA&M management, and vulnerability remediation tracking.
• Solid understanding of Azure networking (NSGs, private endpoints, firewall rulesets).
• Familiarity with FedRAMP, HIPAA, and NIST 800-53 frameworks and their application in enterprise environments.

Preferred Qualifications

• Microsoft Certified: Azure Security Engineer Associate (strongly preferred).
• Experience with Microsoft Purview (DLP, Information Protection, Insider Risk).
• Background in healthcare or federal security operations .
• Familiarity with Terraform, Bicep, or ARM templates for secure configuration automation.
• Experience integrating Sentinel with Logic Apps or Azure Automation for compliance reporting and SOAR workflows.

#GDITFedHealthJobs

Work Requirements

Years of Experience

3 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

Microsoft Certified: Cybersecurity Architect Expert (SC-100) | Microsoft - Microsoft

Microsoft Certified: Azure Security Engineer Associate (AZ-500) | Microsoft - Microsoft

Travel Required

Less than 10%

Job Tags

Similar Jobs