Description
As a Cybersecurity Analyst Principal at GDIT, you will play a crucial role in helping to protect our customers' systems, networks, and data.
Responsibilities:
- Lead, manage, and support our customers' cyber tool stack and ability to implement defensive rules.
- Collaborate with other government agencies to record and prepare incident reports and analysis methodology and results.
- Provide insight to Detection and Response teams on signature functionality and provide signature tuning as needed.
- Monitor and analyze signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives.
- Create Splunk Dashboards.
- Provide guidance and work leadership to less-experienced staff.
- Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc.
- Experience using advanced data analytics tools and techniques, such as Splunk, SQL, Python, and statistical modeling.
Requirements:
- 8+ years of related experience.
- Education: BS Degree or equivalent experience.
- Technical skills: experience with Perl Compatible Regular Expressions (PCRE), authoring Yara rules and Snort signatures.
- Security clearance level: TS SCI / with Polygraph.
- US citizenship required.
Benefits:
- Comprehensive benefits and wellness packages.
- 401K with company match.
- Competitive pay and paid time off.
- Full flex work weeks where possible.
- Paid parental, military, bereavement, and jury duty leave.
- Short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.