IDS/IPS Lead & Splunk Expert for Cyber Defense

General Dynamics Information Technology (GDIT); Reston (VA); On-site; USD 149,000 - 201,000; Full time

Benefits offered by this job

Medical plan options

401(k) with company match

Paid time off

Job summary

General Dynamics Information Technology (GDIT) is seeking a Cybersecurity Analyst Principal to support the DIA mission, protecting systems, networks and data. The role involves leading cyber tool stacks, incident reporting, signature tuning and dashboard creation.

You will collaborate with government agencies, monitor IDS/IPS alerts, and guide less-experienced staff while utilising Splunk, Snort, Suricata, Palo Alto, Fidelis and other tools. On-site work required at customer location.

Qualifications

• BS Degree or equivalent experience.
• 8+ years of related experience.
• Experience with PCRE, Yara rules and snort signatures.
• Security clearance TS SCI / with Polygraph.
• US citizenship required.
• Role performed directly at customer site.

Responsibilities

• Lead/Manage/Support our customers cyber tool stack and implement defensive rules.
• Collaborate with other government agencies to record and prepare incident reports and analysis.
• Provide insight to Detection and Response teams on signature functionality and tuning.
• Monitor and analyze signature alerts from IDS/IPS for false positives.
• Create Splunk Dashboards.
• Provide guidance and work leadership to less-experienced staff.
• Utilise Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc.
• Experience using advanced data analytics tools such as Splunk, SQL, Python.

Skills

Splunk

IDS/IPS

Python

SQL

Regex/PCRE

Yara rules

Snort signatures

Suricata

Palo Alto

Fidelis

Education

BS Degree

Tools

Splunk

Snort signatures

Suricata

Job description

General Dynamics Information Technology (GDIT) is seeking a Cybersecurity Analyst Principal to support the DIA mission, protecting systems, networks and data. The role involves leading cyber tool stacks, incident reporting, signature tuning and dashboard creation.

You will collaborate with government agencies, monitor IDS/IPS alerts, and guide less-experienced staff while utilising Splunk, Snort, Suricata, Palo Alto, Fidelis and other tools. On-site work required at customer location.