Cybersecurity Analyst Principal: IDS/IPS & Splunk Lead

General Dynamics Information Technology (GDIT); Washington (District of Columbia); On-site; USD 149,000 - 201,000; Full time

Benefits offered by this job

Health benefits

401K with company match

Paid time off

Flexible work weeks

Military-friendly culture

Job summary

General Dynamics Information Technology (GDIT) is seeking a Cybersecurity Analyst Principal to support DIA missions in the federal space. You will lead and guide advanced cyber tool stacks, craft defensive rules, and document incident analyses across multiple agencies.

You will work on Splunk dashboards, signature tuning, and data analytics using SQL and Python, collaborating with teams to protect networks and data while mentoring junior staff at customer sites nationwide.

Qualifications

• Education: BS Degree or equivalent experience.
• Experience: 8+ years of related experience.
• Technical skills: PCRE, Yara rules and snort signatures.
• Security clearance: TS SCI / with Polygraph.
• US citizenship required.
• Role: work at customer site.

Responsibilities

• Lead/Manage/Support our customers' cyber tool stack and implement defensive rules.
• Collaborate with government agencies to record incident reports and analysis methodology.
• Provide insight to Detection and Response teams on signature functionality and tuning.
• Monitor and analyze signature alerts from IDS/IPS for false positives.
• Create Splunk dashboards and provide guidance to staff.
• Utilise Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis.

Skills

Splunk

SQL

Python

PCRE

Yara rules

Snort signatures

Suricata

Palo Alto

Fidelis

Data analytics

Education

BS degree or equivalent experience

Tools

Splunk

Snort

Suricata

Fidelis

Regex

Job description

General Dynamics Information Technology (GDIT) is seeking a Cybersecurity Analyst Principal to support DIA missions in the federal space. You will lead and guide advanced cyber tool stacks, craft defensive rules, and document incident analyses across multiple agencies.

You will work on Splunk dashboards, signature tuning, and data analytics using SQL and Python, collaborating with teams to protect networks and data while mentoring junior staff at customer sites nationwide.