Cyber Intrusion Detection System Administrator - TS/SCI with Polygraph

GD Information Technology•Reston, VA

10d•$148,750 - $201,250•Onsite

About The Position

Advance your career while impacting our national security in cyber as a Cybersecurity Analyst Principal at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. MEANINGFUL WORK AND PERSONAL IMPACT As a Cybersecurity Analyst Principal, the work you’ll do at GDIT will be impactful to the mission of DIA. You will play a crucial role in helping to protect our customers systems. Networks, and data. ● Lead/Manage/Support our customers cyber tool stack and ability to implement defensive rules. ● Collaborate with other government agencies to record and prepare incident reports and analysis methodology and results. ● Provide insight to Detection and Response teams on signature functionality and providing signature tuning as needed. ●Monitoring and analyzing signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives. ● Creating Splunk Dashboards ● Provide guidance and work leadership to less-experienced staff ●Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc ●Experience using advanced data analytics tools and techniques, such as Splunk, SQL, Python, and statistical modeling. ●Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc WHAT YOU’LL NEED TO SUCCEED Bring your cyber expertise and drive for innovation to GDIT. The Cybersecurity Analyst Principal must have: ● Education: BS Degree or equivalent experience ● Experience: 8+ years of related experience ● Technical skills: experience with Perl Compatible Regular Expressions (PCRE), authoring Yara rules and snort signatures ● Security clearance level: TS SCI / with CI Poly ● US citizenship required ● Role requirements: work is performed directly at customer site. GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do. ● Growth: AI-powered career tool that identifies career steps and learning opportunities ● Support: An internal mobility team focused on helping you achieve your career goals ● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off ● Community: Award-winning culture of innovation and a military-friendly workplace OWN YOUR OPPORTUNITY Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters. The likely salary range for this position is $148,750 - $201,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Requirements

BS Degree or equivalent experience
8+ years of related experience
Experience with Perl Compatible Regular Expressions (PCRE), authoring Yara rules and snort signatures
TS SCI / with CI Poly
US citizenship required
Work is performed directly at customer site
Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc
Experience using advanced data analytics tools and techniques, such as Splunk, SQL, Python, and statistical modeling.

Responsibilities

Lead/Manage/Support our customers cyber tool stack and ability to implement defensive rules.
Collaborate with other government agencies to record and prepare incident reports and analysis methodology and results.
Provide insight to Detection and Response teams on signature functionality and providing signature tuning as needed.
Monitoring and analyzing signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives.
Creating Splunk Dashboards
Provide guidance and work leadership to less-experienced staff