Information Assurance and Security Analyst

Peraton • Fort Huachuca, AZ

2d

About The Position

Peraton is seeking an Information Assurance and Security Lead Associate to analyze alerts from security tools, assess their operational impact, and identify adversary activity. The role develops and implements custom signatures, filters, and rules for IDPS and SIEM technologies, manages vulnerabilities in defensive and SIEM architectures, and provides analysis, reports, and recommendations to senior cyber defense officials.

The analyst works with customers to install and maintain intrusion prevention and detection sensors, monitor and troubleshoot alerts, and report on sensor activity. Responsibilities also include managing the signature lifecycle, developing and testing signatures and SIEM rules, integrating log sources into the CSSP SIEM, checking data-feed health, and collaborating with incident response and other security teams. The position supports compliance through weekly STIG checks, patch management, and repository updates, and conducts risk assessments and mitigation planning for defensive cyber infrastructure.

Requirements

• Experience requirements: 5 years with a bachelor's degree; 3 years with a master's degree; 0 years with a PhD; 9 years without a degree; or 7 years with an associate degree.
• Must possess a DoW 8140 DCWF 521 intermediate certification at the start.
• Ability to obtain a DoD Secret Clearance.

Nice To Haves

• Active DoD Secret Clearance.

Responsibilities

• Analyze alerts from security tools to assess operational impact and identify adversary activity.
• Develop and implement custom signatures, filters, and rules for IDPS and SIEM technologies.
• Conduct vulnerability management for defensive and SIEM architectures.
• Produce analysis, reports, and recommendations for senior cyber defense officials.
• Work with customers to configure and install IPS and IDS sensors and perform weekly sensor maintenance and updates.
• Monitor IPS and IDS alerts and alarms, troubleshoot issues using established TTPs and SOPs, and escalate to vendors when appropriate.
• Provide weekly sensor reports and produce products based on sensor statistics.
• Manage incident, change, problem, and lifecycle processes to track policy updates and signature development.
• Research vendor signature releases; develop, test, and deploy custom signatures and signature sets to managers and sensors.
• Develop and test SIEM rules, review existing rules and signatures for changes, and correlate SIEM events to identify possible attacks.
• Integrate log types into the CSSP SIEM with customers and monitor data-feed health.
• Collaborate with Incident Response, Content and Development, and other security operations teams on security efforts and response strategies.
• Conduct weekly STIG checks on team-maintained appliances and servers, perform patch management, and update compliance repositories.
• Assess risks and vulnerabilities in the Defensive Cyber infrastructure division and develop mitigation and remediation strategies.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Health savings account
• Short- and long-term disability
• Employee assistance program
• Parental leave
• 401(k)
• Paid time off for vacation
• Company-paid holidays
• Potential eligibility for overtime, shift differential, and a discretionary bonus

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed