Senior Cyber Defense Analytics Engineer

D2 Consulting; St. Louis (MO); On-site; USD 90,000 - 100,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Accrued PTO

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Job summary

D2 Technical Services is seeking a highly experienced cybersecurity analyst to develop and maintain defensive countermeasures across the enterprise. You will work in a Fusion model, collaborating with Focused Operations and other teams to proactively prevent compromises and eradicate persistent adversaries.

Responsibilities include tuning SIEM signatures, analyzing incident data, and supporting Purple Team exercises.

Qualifications

• U.S. citizen with active TS/SCI clearance.
• 8+ years of advanced cyber security analytics experience.
• Certification compliant with DoD 8140.01 and DoD 8570.01-M IAT Level III CSSP Analyst.
• Experience with data mining or building queries in a SIEM.
• Strong understanding of signature development and tuning.
• Strong understanding of network protocols and analysis with protocol analyzers.
• Knowledge of static file signatures and how they apply to defenses.
• Familiarity with regular expressions.

Responsibilities

• Develop and maintain defensive countermeasures for the enterprise.
• Collaborate with Focused Operations to prevent compromises and eradicate adversaries.
• Review intelligence reports and incident reports; conduct Purple Teaming exercises.
• Tune rules/signatures/scripts for SIEM and incident response.
• Coordinate with Cyber Data Analytics and other teams to improve alert efficiency.
• Assist Cyber Incident Response Team during ongoing incidents and triage.

Skills

Cyber security analytics

Regex proficiency

SIEM queries

Signature development

Network protocol analysis

Python/bash/powershell scripting

Education

DoD 8140.01 / DoD 8570.01-M IAT Level III CSSP Analyst certification

Tools

Python

Bash

PowerShell

Job description

D2 Technical Services is seeking a highly experienced cybersecurity analyst to develop and maintain defensive countermeasures across the enterprise. You will work in a Fusion model, collaborating with Focused Operations and other teams to proactively prevent compromises and eradicate persistent adversaries.

Responsibilities include tuning SIEM signatures, analyzing incident data, and supporting Purple Team exercises.