Cyber Intrusion Detection System Administrator – TS/SCI with Polygraph
General Dynamics Information Technology
full-time
Posted on:
Location Type: Office
Location: Reston • Colorado, District of Columbia, Virginia • 🇺🇸 United States
Visit company websiteSalary
💰 $148,750 - $201,250 per year
Job Level
SeniorLead
Tech Stack
FirewallsPerlPythonSplunkSQLTypeScript
About the role
- Lead/Manage/Support our customers cyber tool stack and ability to implement defensive rules
- Collaborate with other government agencies to record and prepare incident reports and analysis methodology and results
- Provide insight to Detection and Response teams on signature functionality and providing signature tuning as needed
- Monitoring and analyzing signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives
- Creating Splunk Dashboards
- Provide guidance and work leadership to less-experienced staff
- Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc
- Experience using advanced data analytics tools and techniques, such as Splunk, SQL, Python, and statistical modeling
Requirements
- 8+ years of related experience
- US Citizenship Required
- Education: BS Degree or equivalent experience
- Technical skills: experience with Perl Compatible Regular Expressions (PCRE), authoring Yara rules and snort signatures
- Security clearance level: TS SCI / with CI Poly
- Role requirements: work is performed directly at customer site
Benefits
- Comprehensive benefits and wellness packages
- 401K with company match
- Competitive pay and paid time off
- Full flex work weeks where possible
- Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
- Short and long-term disability benefits
- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
data analyticssignature tuningincident reportingstatistical modelingPerl Compatible Regular Expressions (PCRE)Yara rulesSnort signaturesmonitoringanalyzing alertsdefensive rules implementation
Soft skills
leadershipcollaborationguidancecommunication
Certifications
TS SCI security clearanceCI Poly