Endpoint analyst - Falls Church, United States - BAE Systems

BAE Systems Falls Church, United States

2 weeks ago

Full time

Description

Job Description BAE Systems, Inc. is searching for a Mid to Senior level Endpoint Threat Detection and Response analyst to conduct host-based defensive cyber operations.

Such operations include:
reviewing detections/alerts, investigating suspicious activity, threat hunting, developing detection content and performing live artifact retrieval on EDR/EPP platforms. In addition, developing deployable forensics tools.Required Education, Experience, & Skills Monitor detections/alerts in EDR/EPP platforms
Investigate and triage detections/alerts in EDR/EPP platforms
Conduct threat hunting operations using various tools
Develop host-based detection content in EDR/EPP platforms
Experience developing deployable forensics tools (for system admins to be able to run to automatically gather artifacts for offline analysis)
Incident Response
Intrusion Analysis
Forensic Analysis
Experience working in a security operations center
Working understanding of the Lockheed Martin Cyber Kill Chain
College degree is not required

Extensive experience with Windows operating system function, registry, internals, etc.

Experience with and understanding of common malware tactics and how they interact with victim systems.

Experience with coding/scripting in languages such as Python, PowerShell, Unix Shell Scripting.

Experience with any of SentinelOne, CrowdStrike, Carbon Black, FireEye HX, McAfee ePO, etc.

Linux OS familiarity.

Preferred Education, Experience, & Skills Experience with both commodity and nation-state malware
Familiar with malware families (e.g. PoisonIvy, Gh0st RAT)
PowerShell Scripting
CrowdStrike Falcon experience
FireEye Endpoint Protection (HX) experience
McAfee Access Protection (ePO/MCAP) experience
Solid experience with Linux OS
Writing of Yara rules to identify malicious files

Pay Information

Full-Time Salary Range:
$ $156860

Please note:
This range is based on our market pay structures.

However, individual salaries are determined by a variety of factors including, but not limited to:

business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits:

At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being.

Regular employees scheduled to work 20+ hours per week are offered:

health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance.

We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance.

Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave.

Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
About BAE Systems, Inc.BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts – defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team—making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.

Our Commitment to Diversity, Equity, and Inclusion:

At BAE Systems, we work hard every day to nurture an inclusive culture where employees are valued and feel like they belong.

We are conscious of the need for all employees to see themselves reflected at every level of the company and know that in order to unlock the full potential of our workforce, everyone must feel confident being their best, most sincere self and be equipped to thrive.

We provide impactful professional development experiences to our employees and invest in social impact partnerships to uplift communities and drive purposeful change.

Here you will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, grow and belong.

Cyber Endpoint Analyst

5 days ago

RBR Technologies Fort Meade, United States

Job Description · Job DescriptionRBR-Technologies is a small service-disabled veteran-owned information and technology business founded on the basic principle of delivering customer mission success. RBR-technologies prides itself on our commitment to mission success as exemplifie ...
Cyber Endpoint Analyst with Security Clearance

6 days ago

RBR-Technologies, Inc. Columbia, United States

RBR-Technologies is a small service-disabled veteran-owned information and technology business founded on the basic principle of delivering customer mission success. RBR-technologies prides itself on our commitment to mission success as exemplified by the trust our customers and ...
Logistics Analyst

2 weeks ago

enGenius Consulting Group Arlington, United States

enGenius is looking for **Logistics Analysts** for a prospective DOD contract within the National Capital Region. A contract award is expected in April 2024 and will entail support to the Joint Service Provider (JSP) providing IT products, services, and solutions. · **Location**: ...
Associate Detection

1 week ago

Rapid7 Arlington, United States

**Associate Detection & Response Analyst - MDR** · We are seeking someone with a passion for cyber security to join our team. As a SOC Analyst with Rapid7 you will work with Rapid7's advanced tools to investigate and triage high priority security events. Working with Rapid7's Tac ...
Cybersecurity Threat Analyst

1 week ago

Calibrate North Arlington, United States

Title: Cyber Security Threat Analyst · Location: Arlington, VA (Onsite) · Terms: Full-Time/Permanent · Clearance: All qualified candidates must possess an active DoD TS clearance with SCI eligibility · Overview: · We are seeking a highly motivated Cyber Threat Analyst to join ou ...
Incident Response Analyst

1 week ago

MindPoint Group Washington, United States

MindPoint Group is seeking a Security Operations Center (SOC) Analyst that will collaborate with members of the SOC team to improve procedures for the SOC to enhance coordination and incident response operations. You must be willing to work in a 24x7x365 SOC environment demonstra ...
Cyber Security SOC Manager

1 week ago

Bering Straits Native Corporation (BSNC) Washington, United States

Overview: · **SUMMARY** · The goal of the Security Operations Center (SOC) team is to proactively monitor, identify, and remediate information technology security vulnerabilities and intrusions. The team needs to ensure that all operational security controls are appropriately app ...
Process Orchestration Architect

1 week ago

Auspicious Consulting Washington, United States

**Long-term contract position, $65 per hr, hybrid position you will be required to work from our client office at least 4 days in a week** · **Job Overview**: · We are looking to hire 8+ years of experience Process Orchestration Architect (Camunda) specializing in designing and i ...
Cyber Security Analyst/soc

1 week ago

Bering Straits Native Corporation (BSNC) Washington, United States

Overview: · - Job specifications are intended to present a descriptive list of the range of duties performed by employees. Specifications are _not_ intended to reflect all duties performed within the job._ · **SUMMARY** · The goal of the Security Operations Center (SOC) team is t ...
Administrator, Incident Response

2 days ago

The Carlyle Group Washington, United States

**Basic information**: · - Job Name: · - Administrator, Incident Response- Location: · - Washington, DC- Line of Business: · - Global Technology & Solutions- Job Function: · - Investor Services- Date: · - Thursday, April 25, 2024**Position Summary**: · - The Incident Response Ana ...
All Source Analyst Expert

2 weeks ago

Cherokee Federal Quantico, United States

**All Source Analyst - Expert · This position requires an active **TS/Sensitive Compartmental Information (SCI) **clearance. · Cherokee Analytics is seeking exceptionally qualified individuals to serve as All Source Analysts to support the Defense Counterintelligence Security Age ...
Cyber Security Analyst

2 weeks ago

General Dynamics Information Technology Manassas, United States

Type of Requisition: · Regular · Clearance Level Must Currently Possess: · Secret · Clearance Level Must Be Able to Obtain: · Top Secret/SCI · Suitability: · Public Trust/Other Required: · Job Family: · Cyber Security · Job Qualifications: · **Skills**:Computer Networking, Monito ...
IT Support Team Lead

5 days ago

DLH Rockville, United States

**About Us** · DLH delivers improved health and national security readiness solutions for federal programs through science research and development, systems engineering and integration, and digital transformation. Our experts in public health, performance evaluation, and health o ...
System Analyst

5 days ago

HumanTouch LLC Rockville, United States

**HumanTouch is seeking a System Analyst (Mid-Level Role) in Rockville, MD** · You must be resourceful and creative in problem solving, be able to juggle competing tasks simultaneously, and work independently while collaborating with a team. You must be flexible and adaptable to ...
Enterprise Threat Intel Analyst Sme

1 week ago

Sentar Quantico, United States

Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the small business team where you can build, innovate, a ...
Detection Engineer- Secret Cleared

2 weeks ago

Federal Staffing Solutions Inc. Ashburn, United States

We connect our employees with some of the best opportunities around. · Time and time again, our employees tell us that the most important thing we offer is respect. Federal Staffing Solutions puts people to work in all types of jobs. When you work with us, you build a relationshi ...
Tier 2 IR Day Shift Back

1 week ago

Federal Staffing Solutions Inc. Ashburn, United States

We connect our employees with some of the best opportunities around. · Time and time again, our employees tell us that the most important thing we offer is respect. Federal Staffing Solutions puts people to work in all types of jobs. When you work with us, you build a relationshi ...
Cyber Defense Full Stack Developer

3 days ago

BAE Systems Falls Church, United States Full time

Job Description The BAE Systems Global Security Operations Center (GSOC) is looking for a SecOps-inspired full stack developer. This developer will solve complex cyber defense challenges by creating custom applications integrating with other state-of-the-art defense systems. Thes ...
Endpoint Security Engineer with Security Clearance

6 days ago

Base One Technologies Arlington, United States

Primary Responsibilities: · • Lead, manage, and understand the entire endpoint security lifecycle: obtain visibility, minimize surface area of attack, prevent and detect threats, investigate and respond, and remediate · • Deploying, configuring, operating, monitoring, tuning, upg ...
Cybersecurity Threat Analyst

2 weeks ago

Calibrate North LLC Arlington, United States

Job Description · Title: Cyber Security Threat Analyst · Location: Arlington, VA (Onsite) · Terms: Full-Time/Permanent · Clearance: All qualified candidates must possess an active DoD TS clearance with SCI eligibility · Overview: · We are seeking a highly motivated Cyber T ...