TS/SCI Cyber IDS Lead (Polygraph)

General Dynamics Information Technology, Inc.; Reston (VA); On-site; USD 149,000 - 201,000; Full time

Benefits offered by this job

Growth opportunities

Internal mobility team

Comprehensive benefits & 401K

Award-winning culture

Job summary

General Dynamics Information Technology, Inc. seeks an experienced cyber risk professional to lead defense tool stacks and analytic initiatives at a senior level. The role requires 8+ years of related experience, TS/SCI with polygraph, and US citizenship.

You will work directly at a customer site, building detections, dashboards, and incident analyses. Responsibilities include mentoring staff, collaborating across agencies, and tuning signatures in Splunk, Snort, Suricata, and firewalls to

Qualifications

• BS Degree or equivalent experience
• 8+ years of related experience
• US Citizenship required
• TS SCI / with Polygraph clearance

Responsibilities

• Lead/Manage/Support our customers cyber tool stack and implement defensive rules
• Collaborate with other government agencies to record and prepare incident reports and analysis
• Provide insight to Detection and Response teams on signature functionality and tuning
• Monitor and analyze signature alerts from IDS/IPS for false positives
• Create Splunk Dashboards
• Provide guidance and work leadership to less-experienced staff
• Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis
• Experience using advanced data analytics tools such as Splunk, SQL, Python, and statistical modeling

Skills

Cyber Defense

Data Analysis

Information Assurance

Education

BS Degree or equivalent experience

Tools

Splunk

Snort signatures

Regular Expressions

Suricata

Palo Alto Firewalls

Fidelis

SQL

Python

Job description

General Dynamics Information Technology, Inc. seeks an experienced cyber risk professional to lead defense tool stacks and analytic initiatives at a senior level. The role requires 8+ years of related experience, TS/SCI with polygraph, and US citizenship.

You will work directly at a customer site, building detections, dashboards, and incident analyses. Responsibilities include mentoring staff, collaborating across agencies, and tuning signatures in Splunk, Snort, Suricata, and firewalls to