Senior Cybersecurity Specialist
3 weeks ago
Axxum Technologies is seeking a highly skilled Senior Cybersecurity Specialist to join our team. As a Senior Cybersecurity Specialist, you will be responsible for participating in threat actor-based investigations, creating new detection methodologies, and providing expert support to incident response and monitoring functions.
Key Responsibilities:- General SIEM monitoring, analysis, content development, and maintenance
- Research, analysis, and response for alerts; including log retrieval and documentation
- Conduct analysis of network traffic and host activity across a wide array of technologies and platforms
- Assist in incident response activities such as host triage and retrieval, malware analysis, remote system analysis, end-user interviews, and remediation efforts
- Compile detailed investigation and analysis reports for internal SOC consumption and delivery to management
- Track threat actors and associated tactics, techniques, and procedures (TTPs)
- Capture intelligence on threat actor TTPs and develop countermeasures in response to threat actors
- Analyze network traffic, IDS/IPS/DLP events, packet capture, and FW logs
- Analyze malicious campaigns and evaluate effectiveness of security technologies
- Coordinate threat hunting activities across the network leveraging intelligence from multiple internal and external sources, as well as cutting-edge security technologies
- Design and build custom tools for investigations, hunting, and research
- Assist in the design, evaluation, and implementation of new security technologies
- Lead response and investigation efforts into advanced/targeted attacks
- Hunt for and identify threat actor groups and their techniques, tools, and processes
- Identify gaps in IT infrastructure by mimicking an attacker's behaviors and responses
- Provide expert analytic investigative support of large-scale and complex security incidents
- Perform Root Cause Analysis of security incidents for further enhancement of alert catalog
- Continuously improve processes for use across multiple detection sets for more efficient Security Operations
- Review alerts generated by detection infrastructure for false positive alerts and modify alerts as needed
- Develop dashboards and reports to identify potential threats, suspicious/anomalous activity, malware, etc.
- Provide forensic analysis of network packet captures, DNS, proxy, Netflow, malware, host-based security, and application logs, as well as logs from various types of security sensors
- A passion for research and uncovering the unknown about internet threats and threat actors
- Ensure the SOC analyst team is providing excellent customer service and support
- 7+ years of relevant cybersecurity experience in IT Security, Incident Response, or network security with strong knowledge working in a Security Operations Center
- BA/BS degree is required OR an additional 6 years of relevant work experience in lieu of degree
- 5+ years experience with the incident response process, including detecting advanced adversaries, log analysis using Splunk or similar tools, and malware triage
- 5+ years experience with creating automated log correlations in Splunk or a similar tool to identify anomalous and potentially malicious behavior
- Demonstrated knowledge of the Splunk search language, search techniques, alerts, dashboards, and report building
- Strong analytical and investigation skills & active threat hunting and adversary tracking
- Working knowledge of security architectures, devices, and threat intelligence consumption and management
- Working knowledge of root causes of malware infections and proactive mitigation
- Working knowledge of lateral movement, footholds, and data exfiltration techniques
- Experience with Netflow or PCAP analysis
- Track record of creative problem solving, and the desire to create and build new processes
- Experience and knowledge of packet flow, TCP/UDP traffic, firewall technologies, IDS technologies, proxy technologies, and antivirus, spam, and spyware solutions
- Convert intelligence into actionable mitigation and technical control recommendations
- Knowledge of the underlying logic that security alerts are built upon and apply them when analyzing raw logs and creating new dashboards and alerts
- Knowledge of typical behaviors of both malware and threat actors and how common protocols and applications work at the network level, including DNS, HTTP, and SMB
- Strong time management and multitasking skills as well as attention to detail as well as strong collaborative skills and proven ability to work in a diverse team of security professionals
- Experience with one or more scripting languages (e.g., Python, JavaScript, Perl)
- Perform memory analysis and malware analysis
- Experience with computer exploitation methodologies
- Experience as a government contractor
- GCIA, GCIH, GMON, GDAT, Splunk Core Power User, and a minimum of 7 years related experience
Axxum Technologies offers a competitive salary and benefits package, including health insurance, paid vacation, disability, and life insurance. Please visit our Careers page for additional information.
-
Senior Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States SVD Solutions Full timeJob Title: Senior Cybersecurity SpecialistSVD Solutions is seeking a highly skilled Senior Cybersecurity Specialist to join our dynamic Cyber Programs division. As a key member of our team, you will be responsible for conducting annual security assessments of FISMA reportable systems in support of our on-going authorization.Key Responsibilities:Supporting...
-
Senior Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States JFL Consulting, LLC Full timeJob OverviewWe are seeking a highly skilled Senior Cybersecurity Specialist to join our team at JFL Consulting, LLC. As a key member of our cybersecurity team, you will play a critical role in protecting our clients' critical infrastructure from cyber threats and ensuring the continuous, safe operation of their systems.Key ResponsibilitiesConduct security...
-
Senior Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States R3 LLC Full timeSenior Cybersecurity SpecialistR3 LLC is seeking a highly skilled Senior Cybersecurity Specialist to join our team. As a key member of our security operations team, you will be responsible for designing, implementing, and maintaining the Azure Sentinel security information and event management (SIEM) solution.Key Responsibilities:Design and implement Azure...
-
Senior Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States R3 LLC Full timeSenior Cybersecurity SpecialistR3 LLC is seeking a highly skilled Senior Cybersecurity Specialist to join our team. As a key member of our security operations team, you will be responsible for designing, implementing, and maintaining the Azure Sentinel security information and event management (SIEM) solution.Key Responsibilities:Design and implement Azure...
-
Senior Cybersecurity Specialist
3 weeks ago
Washington, Washington, D.C., United States Client Server Software Solutions Full timeJob DescriptionJob Description: We are seeking a highly skilled Cybersecurity Specialist to join our team at Client Server Software Solutions. As a key member of our security team, you will be responsible for planning, implementing, and monitoring security measures and policies to protect our critical networks and sensitive data.Key Responsibilities:Research...
-
Washington, Washington, D.C., United States Syneren Technologies Corporation Full timeJob Title: Senior Computer Security Systems Specialist TaskJob Summary: We are seeking a highly skilled Senior Computer Security Systems Specialist Task Lead to join our team at Syneren Technologies Corporation. As a key member of our cybersecurity team, you will be responsible for leading project tasks, preparing and delivering senior management reporting,...
-
Cybersecurity Specialist Senior
4 weeks ago
Washington, Washington, D.C., United States OneZero Solutions Full timeJob SummaryWe are seeking a highly skilled Senior Cybersecurity Analyst to join our team at OneZero Solutions. As a key member of our cybersecurity team, you will play a critical role in strengthening our security posture through the enhancement of our Information System Security Program.Key Responsibilities:Conduct independent assessments of application...
-
Senior Cybersecurity Specialist
3 weeks ago
Washington, Washington, D.C., United States Strategic Operational Solutions Full timeJob Summary:Strategic Operational Solutions is seeking a highly skilled Senior Information System Security Officer to support a DHS client. The ideal candidate will have a strong background in cybersecurity and experience working with diverse systems to protect communities nationwide from hazards. This is a remote support position that requires collaboration...
-
Senior Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States VTG Full timeJob SummaryVTG is seeking a Senior Cybersecurity Engineer to provide professional support services for the Guided Missile Frigate (FFG) Program Office (PMS 515). The successful candidate will be responsible for organizing and coordinating information assurance accreditation, working closely with shipbuilders, PARMs, NAVSEA CIO, and other stakeholders.Key...
-
Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States Sev1Tech Full timeJob Title: Cybersecurity SpecialistSev1Tech is seeking a highly skilled Cybersecurity Specialist to join our team. As a Cybersecurity Specialist, you will play a critical role in ensuring the security and integrity of our clients' information systems.The ideal candidate will have a strong background in cybersecurity, with experience in risk management,...
-
Cybersecurity Specialist
3 weeks ago
Washington, Washington, D.C., United States MindPoint Group Full timeJob Title: Cybersecurity SpecialistWe are seeking a highly skilled Cybersecurity Specialist to join our team at MindPoint Group. As a Cybersecurity Specialist, you will play a critical role in conducting in-depth analyses and responding to incidents of potential cyber threats facing our clients.In this role, you will utilize security tools to analyze,...
-
Senior Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States Booz Allen Hamilton Full timeJob Summary:As a Senior Cybersecurity Specialist at Booz Allen Hamilton, you will play a critical role in maintaining a resilient security posture for high-visibility applications. Your expertise in identifying and remediating application security flaws, leading security discussions with application teams, and performing dynamic and static application...
-
Senior Cybersecurity Specialist
3 weeks ago
Washington, Washington, D.C., United States SourcePro Search, LLC Full timeJob Title: Senior Application Security EngineerAbout the Role:We are seeking a highly skilled Senior Application Security Engineer to join our team at SourcePro Search, LLC in Washington, DC. As a key member of our engineering team, you will be responsible for ensuring the security and integrity of our applications and services.Key Responsibilities:Perform...
-
Cybersecurity Specialist
3 weeks ago
Washington, Washington, D.C., United States Avint Full timeJob DescriptionAvint LLC is seeking a highly skilled and motivated Cybersecurity Specialist to join our team in Northern VA. As our Cybersecurity Specialist, you'll be responsible for safeguarding our systems, designing cutting-edge security protocols and providing expertise to our clients. Key Responsibilities:Achieve ATOs for Palantir software across...
-
Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States Aloden, Inc. Full timeJob Title: Cybersecurity SpecialistJob Summary:We are seeking a highly skilled Cybersecurity Specialist to join our team at Aloden, Inc. The ideal candidate will have a strong background in SIEM and security operations, with experience in Splunk, Palo Alto Cortex, and CrowdStrike. Additionally, they should have a solid understanding of threat modeling and...
-
Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States MindPoint Group Full timeJob Title: Cybersecurity SpecialistJob Summary:MindPoint Group is seeking a highly skilled Cybersecurity Specialist to join our team. As a Cybersecurity Specialist, you will play a critical role in conducting in-depth analyses and responding to incidents of potential cyber threats facing our clients.Responsibilities:Utilize security tools to analyze,...
-
Senior Cybersecurity Specialist
3 weeks ago
Washington, Washington, D.C., United States VTG Full timeJob Summary:VTG is seeking a Senior Cybersecurity Engineer to provide professional support services for the planning, design, construction, delivery, and testing of ships under the Guided Missile Frigate (FFG) Program Office (PMS 515).The selected candidate will work at the Washington Navy Yard (WNY), Washington, D.C., and be responsible for coordinating...
-
Cybersecurity Specialist
3 weeks ago
Washington, Washington, D.C., United States Jacobs Full timeWe are seeking a highly skilled Cybersecurity Specialist to join our team at Jacobs in Columbia, MD.The ideal candidate will serve on a team responsible for the Authorization and Assessment process under the Risk Management Framework (RMF) for new and existing information systems.The work environment is fast-paced and sometimes involves deadline...
-
Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States ManTech Full timeJob Summary:We are seeking a highly skilled Cybersecurity Specialist to join our team at ManTech. The ideal candidate will have a strong background in security analysis and a proven track record of identifying and mitigating security risks.Key Responsibilities:Analyze authorization controls in IT systems to ensure compliance with organizational...
-
Cybersecurity Specialist
4 weeks ago
Washington, Washington, D.C., United States World Wildlife Fund Full timeCybersecurity SpecialistWorld Wildlife Fund (WWF) is seeking a highly skilled Cybersecurity Specialist to support our cybersecurity initiatives. The successful candidate will be responsible for monitoring, analyzing, and enhancing the security posture of our information systems.Key Responsibilities:Monitor and analyze security alerts and logsRespond to and...