Cyber Intrusion Detection System Administrator - TS/SCI with Polygraph

General Dynamics Information Technology, Inc.; Reston (VA); On-site; USD 149,000 - 201,000; Full time

Benefits offered by this job

Growth opportunities

Internal mobility team

Comprehensive benefits & 401K

Award-winning culture

Job summary

General Dynamics Information Technology, Inc. seeks an experienced cyber risk professional to lead defense tool stacks and analytic initiatives at a senior level. The role requires 8+ years of related experience, TS/SCI with polygraph, and US citizenship.

You will work directly at a customer site, building detections, dashboards, and incident analyses. Responsibilities include mentoring staff, collaborating across agencies, and tuning signatures in Splunk, Snort, Suricata, and firewalls to

Qualifications

• BS Degree or equivalent experience
• 8+ years of related experience
• US Citizenship required
• TS SCI / with Polygraph clearance

Responsibilities

• Lead/Manage/Support our customers cyber tool stack and implement defensive rules
• Collaborate with other government agencies to record and prepare incident reports and analysis
• Provide insight to Detection and Response teams on signature functionality and tuning
• Monitor and analyze signature alerts from IDS/IPS for false positives
• Create Splunk Dashboards
• Provide guidance and work leadership to less-experienced staff
• Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis
• Experience using advanced data analytics tools such as Splunk, SQL, Python, and statistical modeling

Skills

Cyber Defense

Data Analysis

Information Assurance

Education

BS Degree or equivalent experience

Tools

Splunk

Snort signatures

Regular Expressions

Suricata

Palo Alto Firewalls

Fidelis

SQL

Python

Job description

Type of Requisition

Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret/SCI Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management

Job Qualifications

Job Qualifications: Skills: Cyber Defense, Data Analysis, Information Assurance Certifications: None Experience: 8 + years of related experience US Citizenship Required: Yes

Job Description

• Lead/Manage/Support our customers cyber tool stack and ability to implement defensive rules.
• Collaborate with other government agencies to record and prepare incident reports and analysis methodology and results.
• Provide insight to Detection and Response teams on signature functionality and providing signature tuning as needed.
• Monitoring and analyzing signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives.
• Creating Splunk Dashboards
• Provide guidance and work leadership to less-experienced staff
• Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc
• Experience using advanced data analytics tools and techniques, such as Splunk, SQL, Python, and statistical modeling.
• Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc

What You’ll Need To Succeed

• Education: BS Degree or equivalent experience
• Experience: 8+ years of related experience
• Technical skills: experience with Perl Compatible Regular Expressions (PCRE), authoring Yara rules and snort signatures
• Security clearance level: TS SCI / with Polygraph
• US citizenship required
• Role requirements: work is performed directly at customer site.

GDIT IS YOUR PLACE

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Community: Award-winning culture of innovation and a military-friendly workplace

The likely salary range for this position is $148,750 - $201,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours: 40 Travel Required: Less than 10% Telecommuting Options: Onsite Work Location: USA VA Reston Additional Work Locations: USA CO Colorado Springs, USA DC Washington

Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Opportunity Owned From working with technologies like AI, cyber and cloud to careers in intelligence and health, we offer endless opportunities to apply your expertise to create a safer, smarter world.

For more information about GDIT's Privacy Policy, click here: Privacy Policy | GDIT