Detection Engineer with Security Clearance

3 weeks ago


Ashburn, United States Base One Technologies Full time
Primary Responsibilities
• Identify gaps in malicious activity detection capabilities
• Create new signatures / rules to improve detection of malicious activity
• Test and tune existing signatures / rules to ensure low rate of false positives
• Assist in playbook development for alert triage and Incident Response
• Define and implement alert and threat detection metrics, statistics, and analytics
• Recommend new tools/technologies to improve network visibility
• Support Incident Response and Forensic operations as required to include static/dynamic malware analysis and reverse engineering. • Author and maintain scripts for threat detection and automation Must Have One of the Following J3 Certifications
Tier 2 Response: GCIH – Incident Handler
GCFA – Forensic Analyst
GCFE – Forensic Examiner
GREM – Reverse Engineering Malware
GISF – Security Fundamentals
GXPN – Exploit Researcher and Advanced Penetration Tester
GWEB – Web Application Defender
GNFA – Network Forensic Analyst
OSCP (Certified Professional)
OSCE (Certified Expert)
OSWP (Wireless Professional)
OSEE (Exploitation Expert)
CCFP – Certified Cyber Forensics Professional
CISSP – Certified Information Systems Security
CCNA Security
CCNP Security
CEH – Certified Ethical Hacker
CHFI – Computer Hacking Forensic Investigator
LPT – Licensed Penetration Tester
ECSA – EC-Council Certified Security Analyst
ENSA – EC-Council Network Security Administrator
ECIH – EC-Council Certified Incident Handler
ECSS – EC-Council Certified Security Specialist
ECES – EC-Council Certified Encryption Specialist
EnCE
Windows Forensic Examinations – FTK WFE-FTK
Computer Incident Responders Course - CIRC
Windows Forensic Examination – EnCase – Counter Intelligence (CI) - WFE-E-CI
Forensics and Intrusions in a Windows Environment -FIWE
Basic Qualifications
The Cyber Threat Detection Engineer SME shall have the following qualifications: • In-depth knowledge of Firewalls/Proxies/Intrusion Detection Systems/ Domain Name Servers/DHCP/VPN and other network technologies and tools
• Experience updating, maintaining, and creating IDS variables within a complex enterprise network
• Expert in creating, modifying, tuning IDS signatures/SIEM Correlation Searches/yara rules and/or other detection signatures
• Familiarity with disk based forensic methodologies, Windows, and Linux forensic artifacts
• Experience with Endpoint Detection and Response (EDR) tools such as Carbon Black, Tanium, Crowdstrike, etc
• Able to create, modify, update, and maintain Python and Powershell scripts that enhance endpoint detection capabilities
• In-depth knowledge of attacker tactics, techniques, and procedures
• Author, test, and maintain automation scripts within SOAR platform
• The candidate must currently possess a Secret Clearance. In addition to clearance requirement, all CBP personnel must have a current or be able to favorably pass a 5 year background investigation (BI). • BS degree in Science, Technology, Engineering, Math or related field and 8 years of prior relevant experience with a focus on cyber security or Masters with 6 years of prior relevant experience.
• Should have 5 years of experience serving as a digital media analyst or as a computer forensic analyst.
• Ability to work independently with minimal direction; self-starter/self-motivated Preferred Qualifications
One of the following certifications:
SANS Global Information Assurance Certification (GIAC) Certified Intrusion Analyst (GCIA) SANS Global Information Assurance Certification (GIAC) Certified Forensic Analyst (GCFA)
SANS Global Information Assurance Certification (GIAC) Certified Network Forensic Analyst (GNFA)
Certified Information System Security Professional (CISSP)

  • Ashburn, United States Federal Staffing Solutions Inc. Full time

    Job DescriptionJob DescriptionWe connect our employees with some of the best opportunities around.Time and time again, our employees tell us that the most important thing we offer is respect. Federal Staffing Solutions puts people to work in all types of jobs. When you work with us, you build a relationship with a team of employment professionals in your...


  • Ashburn, United States CareerBuilder Full time

    BS degree in Science, Technology, Engineering, Math or related field and 8 years of prior relevant experience with a focus on cyber security or Masters with 6 years of prior relevant experience. Should have 5 years of experience serving as a digital media Primary Responsibilities Identify gaps in malicious activity detection capabilities Create new...


  • Ashburn, United States Anonymous Employer Full time

    Primary Responsibilities • Perform internal and external pentest against systems to determine vulnerabilities and offer mitigation strategies. • Perform web app pentests • Perform vulnerability risk assessment • Perform physical pentests and social engineering • Perform cyber incident response as needed for programs Basic Qualifications Bachelors'...


  • Ashburn, United States Master Security Full time

    Job DescriptionJob DescriptionMaster Security is a leading provider of security services to government and private sector clients in the North Capitol Region. With a history of reliability spanning more than 50 years, Master Security continues to provide focused, experienced, and professional security personnel and security solutions.Master Security is...


  • Ashburn, United States Gray Tier Technologies LLC Full time

    Department of Homeland Security (DHS), Enterprise Security Operations Center (ESOC) Support Services is a US Government program responsible to monitor, detect, analyze, mitigate, and respond to cyber threats and adversarial activity on the DHS Enterprise. The DHS SOC has primary responsibility for monitoring and responding to security events and incidents...


  • Ashburn, United States Gray Tier Technologies Full time

    Department of Homeland Security (DHS), Enterprise Security Operations Center (ESOC) Support Services is a US Government program responsible to monitor, detect, analyze, mitigate, and respond to cyber threats and adversarial activity on the DHS Enterprise.  The DHS SOC has primary responsibility for monitoring and responding to security events and incidents...


  • Ashburn, United States Gray Tier Technologies LLC Full time

    Department of Homeland Security (DHS), Enterprise Security Operations Center (ESOC) Support Services is a US Government program responsible to monitor, detect, analyze, mitigate, and respond to cyber threats and adversarial activity on the DHS Enterprise. The DHS SOC has primary responsibility for monitoring and responding to security events and incidents...


  • Ashburn, United States Agile Defense Full time

    Agile Defense We are in the business of innovation through information technology and cybersecurity, delivered exceptionally. View company page Agile Defense provides leading-edge Digital Transformation solutions to support and advance our customers' mission. We deliver innovative and high-quality services to our customers worldwide through an empowered and...


  • Ashburn, United States Leidos Full time

    **Description** Our Security Operations Center (SOC) Support Services is a US Government program responsible to monitor, detect, analyze, mitigate, and respond to cyber threats and adversarial activity on the government Enterprise. We have primary responsibility for monitoring and responding to security events and incidents detected at the Trusted Internet...

  • Penetration Tester

    3 days ago


    Ashburn, United States Gray Tier Technologies LLC Full time

    Gray Tier Technologies is looking for a Penetration Tester to support Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) which is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security...


  • Ashburn, United States Base One Technologies Full time

    The Engineer will be leading critical SOC engineering projects including projects such as launching applications into the AWS Cloud, Splunk logging, and SIEM implementation, etc. The Project Engineer will need to work with the customer to prioritize operational issues, engineering activities, and development efforts, and drive the schedule to completion....


  • Ashburn, United States Gray Tier Technologies LLC Full time

    Gray Tier Technologies is seeking a Linux Cyber Security Engineer who is a self-starter with good analytical and problem-solving skills, flexibility, good judgment, and the ability to work on concurrent tasks in an effective manner. Will be a member of a multi-disciplined team working in a high pressure, fast paced environment. Responsibilities will include...

  • Splunk Engineer SME

    1 week ago


    Ashburn, United States Gray Tier Technologies LLC Full time

    Gray Tier Technologies is looking for a Splunk Engineer SME proficient with recognizing and on-boarding new data sources into Splunk, analyzing the data for anomalies and trends, and building dashboards highlighting the key trends of the data. The Splunk engineer should be proficient within a Linux environment, editing and maintaining Splunk configuration...

  • Splunk Engineer SME

    2 days ago


    Ashburn, United States Gray Tier Technologies LLC Full time

    Gray Tier Technologies is looking for a Splunk Engineer SME proficient with recognizing and on-boarding new data sources into Splunk, analyzing the data for anomalies and trends, and building dashboards highlighting the key trends of the data. The Splunk engineer should be proficient within a Linux environment, editing and maintaining Splunk configuration...

  • Edge Program Manager

    3 weeks ago


    Ashburn, United States Marksman Security Full time

    Job Description Job Description Marksman Security Corporation is hiring for a Licensed Edge Program Manager Ashburn, VA. REMOTE ROLE Salary - Will be Discussed If you're looking to grow with an innovative team where you can make an impact within a supportive, collaborative, and flexible work environment-Marksman Security is the place for you! Edge Program...


  • Ashburn, United States Shuvel Digital Full time

    Location: Ashburn, VA Clearance: DHS Public Trust Clearance This FULL TIME position will be the KEY to our continuous integration and delivery of secure software solutions and you will be essential to that success! As the Senior DevSecOps Engineer, you will be collaborating with all development teams to extend and implement a robust CI/CD and application...


  • Ashburn, United States Armaments Research Company, Inc. Full time

    Job DescriptionJob DescriptionDescriptionARC is looking for a software and systems test engineer to support a new and evolving product.  This role is primarily focused on automated software capabilities and integration testing.  Candidates should be familiar with at least one industry standard test framework (e.g. Junit, pytest, etc.).  The test engineer...


  • Ashburn, United States Armaments Research Company, Inc. Full time

    Software and Systems Test EngineerDepartment: Engineering Employment Type: Permanent - Full Time Location: Headquarters Reporting To: Zachary Hester Description ARC is looking for a software and systems test engineer to support a new and evolving product. This role is primarily focused on automated software capabilities and integration testing. Candidates...

  • Senior Cloud Engineer

    2 weeks ago


    Ashburn, United States Brightline Interactive Full time

    Job DescriptionJob DescriptionSalary: The Senior Cloud Engineer will help innovate Brightline’s new and growing product ecosystem that leverages groundbreaking spatial computing and AI capabilities. As a Senior Cloud Engineer, you will lead the design, implementation, and optimization of cloud infrastructure and services to support the development and...


  • Ashburn, United States Harris Geospatial Solutions Full time

    Job Title: Sr Associate, Electrical Engineer Job Code: 10343 Job Location: Ashburn VA Job Description: As a Senior Associate Electrical Engineer, you will be responsible for assigned tasks across a broad range of electrical engineering disciplines including the design, test, and integration of CCAs containing analog, digital, power, and high-speed circuits,...