• Create innovative, thought-provoking, and highly leveraged “must-have” insights focused on cybersecurity and AI in security market trends, growth strategies, and leadership practices for small and midsize providers • Develop actionable frameworks and best practices to help Tech CEOs accelerate decision-making and execution in areas such as threat intelligence, compliance, and product innovation • Analyze and predict market shifts in cybersecurity technologies (e.g., AI-driven security, cloud security, zero trust,) and competitive dynamics • Engage directly with Tech CEOs via virtual and in-person meetings, Gartner conferences, and industry events to address strategic challenges and provide tailored recommendations • Deliver compelling presentations and thought leadership content for Gartner events, client briefings, and professional associations • Collaborate with peers across Gartner’s Insights community to shape research agendas and share provocative ideas that influence the cybersecurity market

Title: Security Subject Matter Expert (SME) Location: USA TX Home Office Job Description: time type Full time job requisition id RQ211630 Type of Requisition: Regular Clearance Level Must Currently Possess: None Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: MBI (T2) Job Family: Cyber and IT Risk Management Job Qualifications: Skills: Identity Access Management (IAM), Platform Security, Single Sign-On (SSO), Vulnerability Management, Zero Trust Certifications: None Experience: 10 + years of related experience US Citizenship Required: No Job Description: The Security Subject Matter Expert (SME) is the program’s security lead for a large, hybrid enterprise (on-prem data centers and multi-cloud). You will architect, implement, and operate a Zero Trust, RMF-aligned security solutions that keep systems reliable, data protected, and the program audit-ready at all times. You will own the end-to-end security operating model, identity and access (including PIV/FIDO and PAM), vulnerability and patch orchestration, logging and SIEM/SOAR, supply-chain integrity (SBOM/provenance), backup/DR resilience, and continuous monitoring. HOW THE SECURITY SME WILL MAKE AN IMPACT: You will convert compliance into a running capability rather than a paperwork cycle. By embedding controls in automation, policy-as-code in pipelines, signed artifacts with attestations, identity-centric access, and immutable backups, you will raise assurance while reducing toil and mean time to recover. You’ll drive continuous compliance with authoritative evidence from VA systems (ITSM/CMDB, SIEM/EDR, vulnerability tools), cut vulnerability aging against CISA KEV targets, and raise control pass rates without slowing delivery. During incidents, you will lead joint “swarm” response, contain issues quickly, and turn lessons into baseline changes, POA&Ms, and updated playbooks. For executives and non-technical stakeholders, you’ll translate risk into clear narratives - what happened, what changed, how we’re safer, and publish trend lines that connect security investments to fewer outages, cleaner audits, and lower total cost of ownership. WHAT YOU’LL NEED TO SUCCEED: - 10+ years in enterprise cybersecurity engineering/operations with direct ownership of hybrid (data center + AWS/Azure) environments; 3+ years in regulated or federal programs (VA/DoD/DHS/HHS or equivalent). - Demonstrated delivery of Zero Trust architectures (per NIST SP 800-207/TIC 3.0), RMF/ATO sustainment (SP 800-53 Rev 5/53B baselines), and continuous monitoring at scale. - Hands-on leadership standing up SIEM/SOAR, EDR, vulnerability management, identity platforms (SSO/PIV/FIDO, PAM/JIT), and audited disaster recovery programs (SP 800-184). - Proven record improving outcomes: higher control pass, reduced critical vuln aging, faster MTTR, successful external assessments, and repeatable ATO renewals. - Experience operating within multi-vendor/SIAM models with cross-vendor OLAs and shared KPIs. - Education: Bachelor's Degree. In lieu of a degree, an additional four years of related experience required - Security clearance level: Public Trust - Timeline: This is a contingent posting, expected to start in August 2026 TECHNICAL PROFICIENCIES: - Identity & Access (ICAM): SSO (SAML/OIDC), PIV/CAC and FIDO2, JIT/PAM, least-privilege for human and workload identities; directory hygiene and join/move/leave automation. - Network & Platform Security: Segmentation and micro-segmentation, SASE/SD-WAN patterns aligned to TIC 3.0; hardened baselines (STIG/CIS) for OS, containers, and Kubernetes/OpenShift (admission control, policy engines). - Logging, Detection, and Response: Event logging per OMB M-21-31, SIEM content engineering, SOAR playbooks, EDR tuning; run tabletop exercises and purple-team improvements. - Vulnerability & Patch Orchestration: Toolchain proficiency (e.g., Tenable/Qualys, WSUS/Linux lifecycle), KEV-driven prioritization, SLAs by criticality, and automated compliance evidence (SCAP). - Secure SDLC & Supply Chain: SSDF (SP 800-218) practices, artifact signing and provenance/attestations (SLSA/SBOM), trusted registries, policy-as-code gates in CI/CD; secrets management (KMS/Vault). - Data & Storage Protection: Encryption in transit/at rest (FIPS-140 validated), key management, DLP patterns, immutable/object-lock backups, tested DR with objective pass/fail artifacts. - Standards & Tooling Fluency: NIST CSF 2.0, SP 800-61 (IR), SP 800-53/53B, SP 800-207, SP 800-184, TIC 3.0, FIPS-140; OSCAL for machine-readable SSP/ConMon SKILLS & ABILITIES: - Clear Communicator: Converts complex risk and telemetry into executive-ready, plain-language updates; writes crisp playbooks, runbooks, and policy one-pagers. - Outcome-Driven: Ties security work to measurable results, control pass rate, vuln aging, incident frequency/MTTR, DR test pass, and audit findings, published on a shared scorecard. - Builder’s Mindset: Designs controls that are easy to use and hard to bypass; prefers automation over manual checks; balances guardrails with delivery speed. - Facilitation & Influence: Leads cross-domain incident “swarming,” champions secure patterns with engineers, and negotiates trade-offs that protect both security and uptime. - Governance & Rigor: Runs change risk reviews, manages POA&Ms to closure, and keeps the ATO pipeline predictable with OSCAL-based evidence and scheduled assessments. - Mission Focus: Aligns security investments with VA outcomes including fewer disruptions for clinicians and staff, stronger protection of Veteran data, and demonstrable stewardship of taxpayer funds PREFERRED CERTIFICATIONS: - CISSP - CCSP - CISM - CASP+ - GIAC (GCIH/GCIA/GMON/GCSA/GPCS/GCED) - CEH - AWS/Azure security specialty - CAP or equivalent RMF credential GDIT IS YOUR PLACE: - Full-flex work week to own your priorities at work and at home - 401K with company match - Comprehensive health and wellness packages - Internal mobility team dedicated to helping you build your skills and own your career - Professional growth opportunities including paid education and certifications - Cutting-edge technology you can learn from - Rest and recharge with paid vacation and 10 company-paid holidays The likely salary range for this position is $165,750 - $224,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: Less than 10% Telecommuting Options: Hybrid Work Location: USA TX Home Office (TXHOME) Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.

• Execute and document risk assessments of the cybersecurity stature of various subsystems and components within the Edison system • Guide product engineering teams to drive inherent risk remediation via documenting and implementing requirements and adoption of best practices to reduce residual risk and improve the cybersecurity stature of the Edison system • Support FDA premarket submissions by preparing cybersecurity documentation including risk management reports, threat model, MDS2 and cybersecurity whitepaper • Support cyber lifecycle management activities including vulnerability monitoring, assessment, and documentation needs • Maintain a positive, results-oriented work environment, building partnerships and modeling teamwork, communicating to team members in an open, balanced, and objective manner • Create/ maintain a clean, safe, and effective work environment.

Title: SIU Investigator - Multi-Line (Desk) Locations: ME, VT, NH, MA, CT, RI, DE, MD or Washington DC Boston, Massachusetts; Baltimore, Maryland; Bangor, Maine; Bridgeport, Connecticut; Burlington, Vermont; Dover, Delaware; Hartford, Connecticut; Manchester, New Hampshire; Portland, Oregon; Providence, Rhode Island; Washington D.C., District of Columbia Type: Full-Time remote Job Description: Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families. Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful. The Opportunity We are looking for a SIU Investigator (mid-level). This is a desk position. Within defined guidelines and framework, protects USAA and our members from potential fraudulent claims by investigating questionable, suspect claims activity in compliance with state insurance fraud-related laws and regulations and policies and procedures. The candidate selected will have strong multi-line SIU Investigation experience. This role is remote eligible. However, you must live in the assigned territory which is ME, VT, NH, MA, CT, RI, DE, MD or Washington DC. There may be occasional business travel. What you'll do: - Applies knowledge and understanding of fraud schemes and investigation strategies on any questionable or suspect first or third part claims. - Participates in the development of fraud prevention strategies. - Applies knowledge of P&C insurance industry products, services, and processes in investigating claims to include P&C insurance policy contracts, coverages and internal claims handling process and procedures. - Applies knowledge of state laws and regulations pertaining to insurance fraud in investigating claims. - Collects evidence of potential fraud through field or remote interviews and thorough searches of investigative databases, internal resources, Internet resources, public records, and forensic tools. - Makes recommendations within defined authority guidelines. - Prepares and presents detailed and comprehensive verbal and written investigative reports summarizing the results of the investigation and recommended outcome. - Develops and maintains external relationships with industry, law enforcement and other contacts involved in fraud investigation, detection, and prevention. - May serve as a resource team member on specific matters through demonstrated skill or training. - Assists with the delivery of fraud awareness training initiatives in a defined environment. - Handles CAT duty responsibilities as business requires. - Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures. What you have: - High School Diploma or General Equivalency Diploma (GED). - 2+ years claims adjusting experience, or P&C SIU/Fraud Investigation experience OR 4+ years prior investigative law enforcement (to include military) or relevant fraud industry investigation experience. - Proven investigatory skills. - Experience obtaining statements from various parties to incidents, witnesses, and suspects. - Ability to gather broad range of evidence and draw conclusions based on the objective details related to the applicability of fraud. - Demonstrated ability to organize and prioritize workload, performing multiple tasks and devising solutions to problems. - Familiarity with using computers and various software packages to enter and extract data for analysis from relevant data sources and systems. - Knowledge of city, state and local regulations, legal concepts, understanding of contracts, case law, medical treatment, and medical terminology. What sets you apart: - SIU experience conducting low to complex P&C fraud investigations OR a combination of Insurance Claims and (Law Enforcement Investigations OR Military Investigations) experience. - Strong background with multi-line SIU investigations - Designations such as CFE, CIFI, SCLA, ACLS, FCLS, LPCS, AIC, CPCU, CCLS, or other. - US military experience through military service or a military spouse/domestic partner Compensation range: The annualized range for this position is: $77,120 - $147,390. This is an hourly position. USAA does not provide visa sponsorship for this role. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, F-1, STEM OPT Training Plans, etc.). Compensation: USAA has an effective process for assessing market data and establishing ranges to ensure we remain competitive. You are paid within the salary range based on your experience and market data of the position. The actual salary for this role may vary by location. Employees may be eligible for pay incentives based on overall corporate and individual performance and at the discretion of the USAA Board of Directors. The above description reflects the details considered necessary to describe the principal functions of the job and should not be construed as a detailed description of all the work requirements that may be performed in the job. Benefits: At USAA our employees enjoy best-in-class benefits to support their physical, financial, and emotional wellness. These benefits include comprehensive medical, dental and vision plans, 401(k), pension, life insurance, parental benefits, adoption assistance, paid time off program with paid holidays plus 16 paid volunteer hours, and various wellness programs. Additionally, our career path planning and continuing education assists employees with their professional goals. Applications for this position are accepted on an ongoing basis, this posting will remain open until the position is filled. Thus, interested candidates are encouraged to apply the same day they view this posting. USAA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.