Cyber Defense Analyst (TS/SCI) – IDS/IPS & SIEM Expert

Cornerstone Defense LLC; Herndon (VA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental & Vision

Generous PTO

401(k)

HSA/FSA options

Life & Disability Insurance

Tuition Reimbursement

Fitness Reimbursement

Job summary

Cornerstone Defense LLC in Herndon, VA is seeking a Cyber Network Defense Analyst to apply expertise in IDS/IPS and customized detection to address challenging cyber security problems. You will tune rules, analyze security events, and help advance the nation's information security posture while collaborating with engineering partners.

Responsibilities include malware detection, forensic analysis, and development of signatures and content for network defense tools, SIEM, and SOAR platforms.

Qualifications

• Active TS/SCI w/ Polygraph clearance required.
• Experience with Host Based IDS/IPS and network defense.
• Ability to analyze security events and logs.
• Ability to develop use cases and brief stakeholders.
• Strong writing and briefing skills.

Responsibilities

• Provide malware detection, intrusion detection, and tool development and integration.
• Utilize forensic analysis to identify malware, misuse, and unauthorized activity.
• Investigate and report on virus and malware alerts to determine root cause.
• Analyze data sources (logs, IC reporting, security events) to identify threats.
• Track intelligence to identify threats and counteract them.
• Create, edit and manage signatures, rules and filters for CND systems.
• Prepare data analytics and reporting.
• Collaborate with engineering to close visibility gaps.

Job description

Cornerstone Defense LLC in Herndon, VA is seeking a Cyber Network Defense Analyst to apply expertise in IDS/IPS and customized detection to address challenging cyber security problems. You will tune rules, analyze security events, and help advance the nation's information security posture while collaborating with engineering partners.

Responsibilities include malware detection, forensic analysis, and development of signatures and content for network defense tools, SIEM, and SOAR platforms.