Cyber Defense IDS Lead - Splunk & Signatures Expert

General Dynamics Information Technology, Inc.; Washington (District of Columbia); On-site; USD 149,000 - 201,000; Full time

Benefits offered by this job

AI‑driven career tools

Internal mobility support

Total rewards & benefits

Job summary

General Dynamics Information Technology (GDIT) is seeking a Cybersecurity Analyst Principal to support DIA missions. You’ll lead and optimize cyber tool stacks, analyze alerts from IDS/IPS, and develop signatures with PCRE, Yara rules, and Snort. Expect collaboration with government agencies and mentorship for junior staff.

The role requires TS/SCI with Poly, US citizenship, and work directly at customer sites, with comprehensive benefits and a path to growth within GDIT.

Qualifications

• BS Degree or equivalent experience required.
• 8+ years of related experience.
• Experience with PCRE, authoring Yara rules and snort signatures.
• TS SCI / with Polygraph clearance.
• US citizenship required.
• Role requires work at customer site.

Responsibilities

• Lead/Manage/Support our customers cyber tool stack and implement defensive rules.
• Collaborate with government agencies to record and prepare incident reports and analysis.
• Provide insight to Detection and Response teams on signature functionality and tuning.
• Monitor and analyze signature alerts from IDS/IPS for false positives.
• Create Splunk dashboards.
• Provide guidance and leadership to less-experienced staff.
• Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc.
• Experience using advanced data analytics tools and techniques like Splunk, SQL, Python, and statistical modeling.

Education

BS Degree or equivalent experience

Tools

Splunk

SQL

Python

Palo Alto Firewalls

Suricata

Fidelis

Snort signatures

Job description

General Dynamics Information Technology (GDIT) is seeking a Cybersecurity Analyst Principal to support DIA missions. You’ll lead and optimize cyber tool stacks, analyze alerts from IDS/IPS, and develop signatures with PCRE, Yara rules, and Snort. Expect collaboration with government agencies and mentorship for junior staff.

The role requires TS/SCI with Poly, US citizenship, and work directly at customer sites, with comprehensive benefits and a path to growth within GDIT.