Cyber Defense Principal: IDS/IPS & Data Analytics

General Dynamics Information Technology; Reston (VA); On-site; USD 149,000 - 201,000; Full time

Benefits offered by this job

Medical, dental, vision plans

401(k) with company match

Paid time off

Job summary

General Dynamics Information Technology is seeking a Cybersecurity Analyst Principal in Reston, VA. The role requires a TS/SCI with Polygraph, US citizenship, and 8+ years of related experience to protect systems and data for federal customers.

You will lead and evolve cyber tool stacks, build dashboards in Splunk, and work with agencies to report incidents while guiding junior staff and tuning signatures for optimal defense.

Qualifications

• BS Degree or equivalent experience required.
• 8+ years of related experience in cybersecurity/IT risk management.
• Requires TS SCI with Polygraph clearance and US citizenship.
• Role performed on customer site with regular travel as needed.

Responsibilities

• Lead/manage/support the customer cyber tool stack and defensive rules.
• Collaborate with other agencies to record incident reports and analyses.
• Provide guidance to Detection and Response teams on signatures and tuning.
• Monitor IDS/IPS alerts for false positives and optimize signatures.
• Create Splunk dashboards to visualize security data.
• Provide leadership to less-experienced staff.
• Work with Splunk, Snort signatures, PCRE, Suricata, Palo Alto, Fidelis, etc.
• Apply advanced data analytics tools (Splunk, SQL, Python, stats) to security problems.

Skills

Cyber Defense

Data Analysis

Information Assurance

Education

BS Degree or equivalent experience

Tools

Splunk

Snort signatures

Suricata

Palo Alto Firewalls

Fidelis

SQL

Python

PCRE

Yara rules

Job description

General Dynamics Information Technology is seeking a Cybersecurity Analyst Principal in Reston, VA. The role requires a TS/SCI with Polygraph, US citizenship, and 8+ years of related experience to protect systems and data for federal customers.

You will lead and evolve cyber tool stacks, build dashboards in Splunk, and work with agencies to report incidents while guiding junior staff and tuning signatures for optimal defense.