Senior Cyber Threat Analytics Engineer (TS/SCI)

D2 Consulting; St. Louis, Northern (MO, KY); Hybrid; USD 90,000 - 100,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Accrued PTO

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Job summary

D2 Technical Services in St. Louis, MO seeks an Advanced Cyber Security Analytics Engineer with an active TS/SCI clearance to strengthen enterprise defenses. You will analyze data, tune SIEM rules, and collaborate with incident response and purple team activities.

Responsibilities include developing countermeasures, reviewing intelligence and incident reports, and documenting work in ticketing systems. Salary range is $90-$100k with strong benefits.

Qualifications

• US citizen with Active TS/SCI clearance.
• 8+ years in advanced cyber security analytics.
• Certification compliant with DoD 8140.01 and DoD 8570.01-M IAT Level III and CSSP Analyst.
• Experience with data mining or building queries in a SIEM.
• Strong understanding of signature development and tuning.
• Strong understanding of network protocols and analysis with protocol analyzers.
• Good working knowledge of regular expressions.

Responsibilities

• Analyzes trends and patterns of data on NGA networks to identify incidents and develop or tune rules/signatures/scripts.
• Coordinates with Defensive Cyber Operations and Focused Operations to develop or tune rules/signatures/scripts.
• Investigates potential sources of compromise and develops or tunes signatures/scripts as needed.
• Correlates precursors to incidents and improves SIEM detection rules.
• Collaborates with the Cyber Data Analytics team to improve SIEM alert efficiency.
• Assesses ongoing incident activity with the Cyber Incident Response Team for triage and localization.
• Documents all work in the ticketing system with detailed notes for traceability.
• Provides input in recurring meetings and briefings.

Skills

Active TS/SCI clearance

SIEM rule development

Regex proficiency

Python scripting

Shell scripting

Purple Team experience

Tools

Hex editor

Protocol analyzers

Job description

D2 Technical Services in St. Louis, MO seeks an Advanced Cyber Security Analytics Engineer with an active TS/SCI clearance to strengthen enterprise defenses. You will analyze data, tune SIEM rules, and collaborate with incident response and purple team activities.

Responsibilities include developing countermeasures, reviewing intelligence and incident reports, and documenting work in ticketing systems. Salary range is $90-$100k with strong benefits.