Tier 2 Threat Analyst — Remote Cyber Defense Leader

General Dynamics Information Technology, Inc.; United States; Remote; USD 110,000 - 160,000; Full time

Job summary

General Dynamics Information Technology, Inc. seeks a Threat Management Specialist (Tier 2) to support USPS, performing deep-dive incident analysis and advising on remediation actions.

You will leverage AI/ML and SOAR capabilities to improve CSOC efficiency while correlating data from multiple sources to assess risk and respond to incidents. You will configure tools like Splunk and ProofPoint, monitor cross-platform alerts, and work nights 11:00 PM–7:30 AM ET.

Qualifications

• 3+ years IT security experience with at least some exposure to AI/ML projects.
• 2+ years' experience in network traffic analysis.
• "Ability to work Monday - Friday, 11:00 PM - 7:30 AM ET".
• Strong working knowledge of: Boolean Logic, TCP/IP Fundamentals, Network Level Exploits, Threat Management.
• Knowledge of Control Frameworks and Risk Management techniques.

Responsibilities

• Identify cybersecurity problems requiring mitigating controls.
• Analyze network traffic for exploits or intrusions.
• Recommend detection mechanisms for exploits or intrusions.
• Provide SME on network attacks, traffic analysis, and intrusion methods.
• Escalate items requiring further investigation to Threat Management team.
• Execute operational processes supporting incident response.
• Utilize AI/ML tools to detect anomalies, automate triage, improve threat intelligence.
• Perform threat intelligence to assess risk and adapt defenses with ML-enabled tools.
• Manage email security using ProofPoint, monitor threats, respond to attacks.
• Configure Splunk for log analysis, create alerts, investigate incidents.
• Set up FirePower for network monitoring, analyze traffic, enforce security.
• Deploy SentinelOne agents, monitor alerts, conduct security assessments.
• Monitor security alerts across Defender suites, Azure, and Google Cloud SCC.
• Perform threat detection and analysis, coordinate incident response, implement remediation.
• Tune security policies and maintain visibility across cloud/endpoint environments.
• Stay current on cybersecurity trends, actors, and AI/ML research.
• Identify and support automation use cases, including AI/ML to enhance SOC capabilities.
• Collaborate across Operations to enhance SOC with automation and AI.

Skills

IT security

AI/ML integration

Network traffic analysis

Threat management

Cloud security

Cybersecurity automation

Data analysis

Machine learning for anomaly detection

Incident response

US residency / clearance readiness

Education

BA or BS in Computer Science, Information Technology or related field

GCED / GSEC / CISSP / SSCP certifications desired

Tools

ProofPoint

Splunk

FirePower

SentinelOne

Microsoft Defender

Azure

Google Cloud SCC

SOAR platforms

Job description

General Dynamics Information Technology, Inc. seeks a Threat Management Specialist (Tier 2) to support USPS, performing deep-dive incident analysis and advising on remediation actions.

You will leverage AI/ML and SOAR capabilities to improve CSOC efficiency while correlating data from multiple sources to assess risk and respond to incidents. You will configure tools like Splunk and ProofPoint, monitor cross-platform alerts, and work nights 11:00 PM–7:30 AM ET.