AI-Driven Threat Management Specialist

PlanIT Group, LLC; Reston (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

PlanIT Group, LLC in Reston, VA seeks Tier 2 Analysts to perform deep-dive incident analysis by correlating data from various sources and advising on remediation actions. They leverage AI, ML, and SOAR capabilities to improve CSOC efficiency and accuracy.

You're expected to support automation initiatives, stay current on cybersecurity trends, and collaborate with Threat Management to enhance detections and responses across cloud and on-prem environments.

Qualifications

• Experience in IT security with exposure to AI/ML projects.
• Strong network traffic analysis and threat management skills.
• Familiarity with IDS/IPS architectures and cloud security.
• Hands-on with automation and SOAR platforms.
• Proficient in data analysis and feature engineering for ML.
• Experience across multiple security platforms and tools.

Responsibilities

• Identify cybersecurity problems requiring mitigations.
• Analyze network traffic for exploit or intrusion attempts.
• Recommend detection mechanisms for intrusions.
• Provide SME on attacks, tools, and methodologies.
• Escalate items needing further investigation.
• Execute response processes and remediation actions.
• Utilize AI/ML to detect anomalies and triage incidents.
• Perform threat intelligence and adapt defenses using ML.
• Manage email security and monitor for threats.
• Configure Splunk for log analysis and alerts.
• Set up FirePower for network monitoring and security.
• Deploy Sentinel 1 agents and conduct security assessments.
• Monitor alerts across Defender, Azure, and GCC SCC.
• Coordinate incident response and remediation actions.
• Tune policies and maintain visibility in cloud/endpoint estates.
• Stay current on cyber trends and AI/ML research.
• Identify and support automation use cases in SOC.

Skills

IT security

Network analysis

AI/ML projects

Threat management

IDS/IPS

Cloud security

Education

Bachelor's degree in cybersecurity

Tools

ProofPoint

Splunk

FirePower

SentinelOne

Defender suite

Azure AD / Defender

Google Cloud SCC

Job description

PlanIT Group, LLC in Reston, VA seeks Tier 2 Analysts to perform deep-dive incident analysis by correlating data from various sources and advising on remediation actions. They leverage AI, ML, and SOAR capabilities to improve CSOC efficiency and accuracy.

You're expected to support automation initiatives, stay current on cybersecurity trends, and collaborate with Threat Management to enhance detections and responses across cloud and on-prem environments.