Principal Cybersecurity Analyst, IDS/IPS Lead

General Dynamics Information Technology; Washington (District of Columbia); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Comprehensive benefits

401K with company match

Paid time off

Job summary

General Dynamics Information Technology is seeking a Cybersecurity Analyst Principal to lead and advance our cyber operations for the DIA. You will manage the cyber tool stack, analyze alerts, and collaborate with government partners to document incidents and methodology.

The role requires a BS degree or equivalent experience, 8+ years in the field, and a TS/SCI with polygraph clearance. You will work onsite at a customer site in the Washington, DC area, applying advanced analytics with Splunk,

Qualifications

• Education: BS Degree or equivalent experience.
• Experience: 8+ years of related experience.
• Technical skills: experience with PCRE, authoring Yara rules and snort signatures.
• Security clearance level: TS SCI / with Polygraph.
• US citizenship required.
• Role requires work at customer site.

Responsibilities

• Lead/Manage/Support our customers cyber tool stack and implement defensive rules.
• Collaborate with other government agencies to record and prepare incident reports and analysis methodology and results.
• Provide insight to Detection and Response teams on signature functionality and tuning.
• Monitor and analyze signature alerts from IDS/IPS for false positives.
• Create Splunk Dashboards.
• Provide guidance to less-experienced staff.
• Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc.
• Experience using advanced data analytics tools such as Splunk, SQL, Python, and statistical modeling.

Skills

PCRE

Yara rules

Snort signatures

Splunk

SQL

Python

Statistical modeling

Regular Expressions

Education

BS Degree or equivalent experience

Tools

Splunk

Snort signatures

Regular Expressions

Suricata

Palo Alto Firewalls

Fidelis

Job description

General Dynamics Information Technology is seeking a Cybersecurity Analyst Principal to lead and advance our cyber operations for the DIA. You will manage the cyber tool stack, analyze alerts, and collaborate with government partners to document incidents and methodology.

The role requires a BS degree or equivalent experience, 8+ years in the field, and a TS/SCI with polygraph clearance. You will work onsite at a customer site in the Washington, DC area, applying advanced analytics with Splunk,