Principal Cyber Defense Analyst - IDS/IPS, Splunk

General Dynamics Information Technology, Inc.; Colorado Springs (CO); On-site; USD 149,000 - 201,000; Full time

Job summary

General Dynamics Information Technology, Inc. is seeking a Cybersecurity Analyst Principal to advance national security efforts by defending networks, data, and systems for DIA.

The role leads cyber tooling, incident analysis, and collaboration with federal partners, while guiding junior staff and shaping defensive strategies. You will leverage Splunk, Snort, Suricata, and firewall technologies to detect, analyze, and respond to threats, applying advanced analytics and scripting skills.

Qualifications

• BS Degree or equivalent experience.
• 8+ years of related experience.
• Experience with PCRE, Yara rules and snort signatures.
• Security clearance TS/SCI with Polygraph.
• US citizenship required.
• Role requires work at customer site.

Responsibilities

• Lead/manage/support the customer cyber tool stack and implement defensive rules.
• Collaborate with government agencies to record and prepare incident reports and analysis methodology and results.
• Provide insight to Detection and Response teams on signature functionality and tuning.
• Monitor and analyze signature alerts from IDS/IPS for false positives.
• Create Splunk dashboards.
• Provide guidance and leadership to less-experienced staff.
• Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc.
• Apply advanced data analytics tools and techniques (Splunk, SQL, Python, statistical modeling).

Skills

Cyber Defense

Data Analysis

Information Assurance

Education

BS Degree or equivalent experience

Tools

Splunk

SQL

Python

PCRE

Yara rules

Snort signatures

Suricata

Palo Alto Firewalls

Fidelis

Job description

General Dynamics Information Technology, Inc. is seeking a Cybersecurity Analyst Principal to advance national security efforts by defending networks, data, and systems for DIA.

The role leads cyber tooling, incident analysis, and collaboration with federal partners, while guiding junior staff and shaping defensive strategies. You will leverage Splunk, Snort, Suricata, and firewall technologies to detect, analyze, and respond to threats, applying advanced analytics and scripting skills.