Information Assurance and Security Analyst

Peraton; Arizona; On-site; USD 110,000 - 140,000; Full time

Job summary

Peraton is hiring an Information Assurance and Security Lead Associate in Arizona. The role analyzes alerts, develops signatures and rules for IDPS and SIEM, and leads vulnerability management to strengthen defenses.

Responsibilities include installing and maintaining IDPS sensors, troubleshooting alerts, producing weekly reports, and driving lifecycle management of signatures and policies. A DoD 8140 intermediate cert is required at start.

Qualifications

• Five years of experience with a BS/BA.
• Three years with an MS/MA.
• Seven years with an Associates degree.
• Nine years of experience without a degree.
• Must possess DoD 8140 DCWF 521 intermediate certification at start.

Responsibilities

• IDPS Installation and Maintenance: configure and install IPS/IDS sensors; weekly maintenance and updates.
• IDPS Troubleshooting: monitor IPS/IDS alerts and resolve per SOPs with vendor involvement.
• Generate IDPS Reports and products: provide weekly sensor reports and sensor statistics outputs.
• Signature Lifecycle management: manage incident/change/problem lifecycle for policy updates.
• Signature Development: research, test, and deploy custom signatures for policy baselines.
• SIEM Rule management: develop/test SIEM rules; review and modify; correlate events for attacks.
• SIEM Configuration: integrate log types into CSSP SIEM and monitor data feed health.
• Cross-Functional Collaboration: coordinate with Incident Response, Content/Development, and other teams.
• STIG and Compliance support: weekly STIG checks; patch management; update repositories.
• Risk Management: perform risk assessments and implement mitigations for defensive cyber infra.

Skills

Analytical thinking

Risk assessment

Cross-functional collaboration

Incident response coordination

Education

BS/BA

MS/MA

Associates

PhD

Tools

IDPS

SIEM

STIG

Job description

• 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD; 9 years w/o degree; 7 years with Associates.Must possess DoW 8140 DCWF 521 intermediate certification at start.
• Ability to obtain a DoD Secret Clearance; however, an active DoD Secret Clearance is preferred.

Peraton is currently seeking an Information Assurance and Security, Lead Associate

Employee analyzes alerts from various security tools to determine the impact on current operations and identify adversary activity. Develops and implements custom signatures, filters, and rules for IDPS and SIEM technologies to meet changing requirements and ensure maximum operational security. Conducts vulnerability management of the defensive and SIEM architecture to proactively mitigate risks. Produces high-quality analysis, reports, and recommendations for senior cyber defense officials.

Key Responsibilities include

• IDPS Installation and Maintenance: Working directly with customers to configure and install IPS and IDS sensors as well as maintaining sensor platforms with weekly maintenance and updates.
• IDPS Troubleshooting: Monitoring Intrusion Prevention Systems (IPS) and intrusion detection systems (IDS) for alerts and alarms and following Troubleshooting TTP's and SOP's for resolution and escalation with vendor.
• Generate IDPS Reports and products: Provide customers with weekly sensor reports and produce products based on sensor statistics.
• Signature Lifecyle management: Analysts will Perform all required organizational requirements including incident, change, problem, and lifecycle management to track policy updates and signature development.
• Signature Development: Research new signatures as they are released by the Vendor. Develop and test custom signatures for inclusion into the policy. Test and deploy signature set to Manager/Sensors to keep the baseline current.
• SIEM Rule management: Develop and test SIEM rules for signatures in the environment. Review SIEM rules and signatures in the environment for modifications. Correlate events in the SIEM to derive information on possible attacks.
• SIEM Configuration: Working with the customers to integrate various log types into the CSSP SIEM and monitoring data feed health.
• Cross-Functional Collaboration: Collaborate effectively with internal teams, including Incident Response, Content and Development, and other security operations teams for ongoing security efforts and response strategies.
• STIG and Compliance support: Conduct weekly STIG checks on team-maintained appliances and servers, provide patch management as well as updating compliance repositories.
• Risk Management: Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the Defensive Cyber infrastructure division. Develop and implement strategies to effectively mitigate and remediate identified risks.