Information Assurance and Security Analyst
About The Position
Peraton is seeking an Information Assurance and Security professional to analyze alerts from security tools, determine impacts on operations, and identify adversary activity. The role develops and implements custom signatures, filters, and rules for IDPS and SIEM technologies, conducts vulnerability management of defensive and SIEM architecture, and produces analysis, reports, and recommendations for senior cyber defense officials. The analyst configures, installs, maintains, and troubleshoots intrusion prevention and detection sensors; manages signature development and deployment; develops and maintains SIEM rules and integrations; and monitors the health of data feeds. The role also supports compliance checks and patch management, conducts risk assessments, and collaborates with incident response, content and development, and other security operations teams.
Requirements
- DoW 8140 DCWF 521 intermediate certification required at the start of employment.
- Ability to obtain a DoD Secret Clearance.
Nice To Haves
- Active DoD Secret Clearance is preferred.
Responsibilities
- Analyze alerts from security tools to determine impacts on current operations and identify adversary activity.
- Develop and implement custom signatures, filters, and rules for IDPS and SIEM technologies.
- Conduct vulnerability management of defensive and SIEM architecture to proactively mitigate risks.
- Produce analysis, reports, and recommendations for senior cyber defense officials.
- Work directly with customers to configure and install IPS and IDS sensors, and maintain sensor platforms with weekly maintenance and updates.
- Monitor IPS and IDS alerts and alarms; follow troubleshooting procedures and standard operating procedures to resolve issues or escalate them to vendors.
- Provide customers with weekly sensor reports and produce products based on sensor statistics.
- Manage incident, change, problem, and lifecycle processes to track policy updates and signature development.
- Research vendor signature releases; develop and test custom signatures; and test and deploy signature sets to managers and sensors.
- Develop and test SIEM rules, review existing rules and signatures for modifications, and correlate SIEM events to identify possible attacks.
- Work with customers to integrate log types into the CSSP SIEM and monitor data-feed health.
- Collaborate with Incident Response, Content and Development, and other security operations teams on security efforts and response strategies.
- Conduct weekly STIG checks on team-maintained appliances and servers, provide patch management, and update compliance repositories.
- Conduct risk assessments to identify threats and vulnerabilities in the Defensive Cyber infrastructure division and develop mitigation and remediation strategies.
Benefits
- Medical benefits
- Dental insurance
- Vision insurance
- Life insurance
- Health savings account
- Short- and long-term disability
- Employee assistance program
- Parental leave
- 401(k)
- Paid time off for vacation
- Company-paid holidays
- Employees may be eligible for overtime, shift differential, and a discretionary bonus, depending on the position.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
