Tech Stack
Cyber SecurityDNSLinux.NETPerlPythonRubySMTPSplunkSQL
About the role
- Provide Security Monitoring and Incident Response support through 24×7×365 monitoring and analysis of potential threat activity
- Conduct event triage and security investigations for potential threat activity
- Conduct deep-dive forensic investigations (host-based and network)
- Identify and implement countermeasures, as well as track and report on incident activity to senior management
- Develop advanced analytics and countermeasures to protect critical systems
- Develop rules, filters, signatures, applications and scripts to support analysis and detection
- Analyze information technology security events and perform incident response and mitigation
- Support various shifts including nights, weekends, and holidays
Requirements
- Active DoD - Public Trust clearance
- One or more certifications for CND Analysts: GCIA, GCIH, GCFA, GCFE, GREM, GISF, GMON, GXPN, CHFI, GNFA, OSCP, OSEE, OSCE, OSWP, CISSP, CCFP, LPT, CHFI, CySA
- 3+ year of experience working in network defense environments
- Bachelor's Degree in Information Technology, Cyber Security, Computer Science, Computer Engineering, or Electrical Engineering
- Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts
- Familiarity with coding, scripting languages (BASH, Powershell, Python, PERL, RUBY etc.) or software development frameworks (.NET)
- Prior experience with Security Information and Event Monitoring (SIEM) platforms and/or log management systems (preferably IBM Qradar or Splunk)
- Strong logical/critical thinking abilities
- Strong proficiency Report writing
- A working knowledge of Windows, OS X, Linux; conceptual understanding of Windows Active Directory
- Working knowledge of network communications and routing protocols (TCP, UDP, ICMP, BGP, MPLS) and internet applications and standards (SMTP, DNS, DHCP, SQL, HTTP, HTTPS)
- Ability to support coverage requirements for various shifts during holidays and weekends
- Ability to work greater than 40 hours per week and/or 12-hour shifts