General Dynamics IT
USA VA Springfield
+ 1 other location
Pipeline
Clearance Level Must Currently Possess:
Top Secret/SCI
Clearance Level Must Be Able to Obtain:
Top Secret SCI + Polygraph
None
Job Family:
Cyber and IT Risk Management
Analytics, ArcSight SIEM, ElasticSearch, Kibana
None
6 + years of related experience
Yes
Job Description:
GDIT is seeking a motivated, career and customer-oriented Cybersecurity Operations Specialist to perform on our Cybersecurity Data Analysis Services team in Springfield, VA.
The team member shall provide cybersecurity data analysis services, which designs, develops, builds, tests, configures, employs, operates, integrates, sustains, and refreshes the Security Information Events Management (SIEM) capability (i.e. Enterprise Audit), long-term analytics platform, log aggregation platform, and the cyber threat intelligence capability, signature development and deployment, and reputation management services. This includes the onboarding of all new and existing IT resources, and ensuring the correct routing of all audit events to mission partners in accordance with Intelligence Community Standards (ICS) 500-27.
Job Duties Include:
Required Skills:
SIEM experience with one of the following ArcSight, ElasticSearch, Splunk, Event Broker, User Behavioral Analysis (UBA)
Experience providing support to Cybersecurity Operations Cell (CSOC) in creating alerting rules
Create SIEM playbooks
Linux (RHEL) Expert (administration and engineering)
Proficient in manipulating SIEM filters to better find and analyze potential malicious/atypical activity and reduce false positives
Experience with content development within ArcSight and Kibana to facilitate Cyber Analysts ability to investigate malicious events
Creation of ArcSight rules based on use cases of malicious events
Tuning and aggregation of queries and filters
Skilled in troubleshooting event flow through Enterprise Audit infrastructure
Skilled in troubleshooting event format and parsing for ingest into data storage and into SIEM tools
Active TS/SCI Clearance
DoD 8570.01-M IAT Level II and CSSP Infrastructure Support certifications
6+ years Experience with SIEM and Development Projects
6+ years Experience with SIEM support for projects and technical exchange meetings
6+ years Experience developing and maintaining enterprise audit projects
The likely salary range for this position is $128,039 - $173,229. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:
40
None
Onsite
Work Location:
USA VA Springfield
Additional Work Locations:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans