Intrusion Detection System Administrator - Ts/Sci Clearance - Ecndo032

About Us:

Today's global security environment is a constant of change. Threats can arise from any point on the globe and our military services must be prepared and capable of responding at a moments’ notice. A core force multiplier is the role played by government contracted services. Come join our Service-Disabled Veteran-Owned Small Business team as we continue to serve the nation and the dedicated men and women who came after us.

About the Opportunity:

As a Cyber Systems Administrator you will help ensure today is safe and tomorrow is smarter. You will have the opportunity to build strong lines of cyber defense using cutting-edge technologies. Your work in cyber security will have an impact on securing our clients' missions and ensuring we anticipate the threats of tomorrow.
 

Required Clearance:

• AN ACTIVE DEPARTMENT OF DEFENSE TS/SCI SECURITY CLEARANCE IS REQUIRED IN ORDER TO APPLY.
• Willingness to submit to and pass a Counter Intelligence (CI) Polygraph.

Location:

• Washington, DC
• Reston, VA
• Colorado Springs, CO

Functional Duties:

• Monitor day-to-day operations of the sensors (Suricata, Palo Alto, and ArcSight) located at supporting customer's locations.
• Perform Enterprise Defense Countermeasure (DC) activities and coordination with other government agencies to record and prepare incident reports and analysis methodology and results.
• Monitor and analyze signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives.
• Provide technical enforcement of organizational security policies.
• Provide "tune-or-drop" recommendations towards the DC team's Signature Lifecycle Review procedure.
• Provide insight to Detection and Response teams on signature functionality and providing signature tuning as needed.
• Communicate with customers and teammates clearly and concisely.
• Maintain current knowledge of relevant technology as assigned.
• Participate in special projects as required.
• Position is day shift but may require evening, weekend or shift-work (depending on operational tempo).

Required Skills and Abilities:

• Experience with Perl Compatible Regular Expressions (PCRE).
• Experience authoring Yara rules.
• Experience authoring Snort signatures.

Preferred Skills:

• Experience in Intrusion Detection and prevention systems.
• Proficient in network security technologies and protocols.
• Dashboarding in Splunk.
• Palo Alto Certification Next-Generation Firewall

Education and Experience: 

• HS/GED + 12 years experience
• Associates Degree + 10 years experience
• Bachelor’s Degree + 8 years experience
• Master’s Degree + 6 years experience
• PhD + 4 years experience

Required Certifications: 

• DoD 8750 IAT II:  One of the following certifications is required: Security+CE, CySA+, GICSP, GSEC, CND, SCCP
• DoD 8750 Specialty, CSSP Infrastructure Support: One of the following certifications is required: CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, CND

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. Joint Enterprise Technologies, LLC is a drug-free workplace and participates in E-Verify.

Joint Enterprise Technologies, LLC is an equal access/equal opportunity employer, committed to excellence in service through diversity employment.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Joint Enterprise Technologies, LLC is committed to working with and providing reasonable accommodation to applicants and employees with disabilities. If you feel you require a reasonable accommodation to apply for a position with Joint Enterprise Technologies, LLC, please call 813-436-9946 or e-mail us and let us know the nature of your request, along with your contact information. Reasonable accommodations are considered on a case-by-case basis. Please note that only those inquiries concerning a request will be considered.

Powered by JazzHR

rMErlv6wXO