A bachelor's degree in Computer Science, Engineering, or a technical field.
A TS/SCI clearance is required.
Responsibilities
Maintain the integrity and security of enterprise-wide cyber systems and networks.
Support cybersecurity initiatives through predictive and reactive analysis, and articulate emerging trends to leadership and staff.
Coordinate resources during enterprise incident-response efforts and drive incidents to timely and complete resolution.
Employ advanced forensic tools and techniques for attack reconstruction, including dead-system analysis and volatile-data collection and analysis.
Support internal HR, Legal, and Ethics investigations as a forensic subject-matter expert.
Perform network-traffic analysis using raw packet data, NetFlow, intrusion-detection-system data, and custom sensor output related to communications-network cybersecurity.
Review threat data from various sources and develop custom signatures for open-source intrusion-detection systems or other custom detection capabilities.
Correlate actionable security events from various sources, including Security Information Management System data, and develop unique correlation techniques.
Apply knowledge of attack signatures, tactics, techniques, and procedures associated with advanced threats.
Develop analytical products by fusing enterprise and all-source intelligence.
Conduct malware analysis of attacker tools and provide indicators for enterprise defensive measures.
Reverse engineer attacker encoding protocols.
Interface with external entities, including law-enforcement organizations and government agencies such as the Department of Defense.
Desired Qualifications
CISSP certification.
Description
Responsible for maintaining the integrity and security of enterprise-wide cyber systems and networks. The candidate must have knowledge of Windows, UNIX, and Linux systems. Supports cyber security initiatives through both predictive and reactive analysis, articulating emerging trends to leadership and staff. Coordinates resources during enterprise incident response efforts, driving incidents to timely and complete resolution. Employs advanced forensic tools and techniques for attack reconstruction, including dead system analysis and volatile data collection and analysis. Supports internal HR/Legal/Ethics investigations as forensic subject matter expert. Performs network traffic analysis utilizing raw packet data, net flow, IDS, and custom sensor output as it pertains to the cyber security of communications networks. Reviews threat data from various sources and develops custom signatures for Open Source IDS or other custom detection capabilities. Correlates actionable security events from various sources including Security Information Management System (SIMS) data and develops unique correlation techniques. Utilizes understanding of attack signatures, tactics, techniques and procedures associated with advanced threats. Develops analytical products fusing enterprise and all-source intelligence. May conduct malware analysis of attacker tools providing indicators for enterprise defensive measures, and reverse engineer attacker encoding protocols. Interfaces with external entities including law enforcement organizations and other government agencies such as the Department of Defense.
Position requires TS/SCI clearance.
Requirements
CISSP Certification preferred, Bachelors Degree in Computer Science, Engineering, or Technical field.