Detection Engineer with Security Clearance - Ashburn, United States - Base One Technologies

Base One Technologies Ashburn, United States

2 weeks ago

Technology / Internet

Description

Primary Responsibilities

Identify gaps in malicious activity detection capabilities
Create new signatures / rules to improve detection of malicious activity
Test and tune existing signatures / rules to ensure low rate of false positives
Assist in playbook development for alert triage and Incident Response
Define and implement alert and threat detection metrics, statistics, and analytics
Recommend new tools/technologies to improve network visibility
Support Incident Response and Forensic operations as required to include static/dynamic malware analysis and reverse engineering.
Author and maintain scripts for threat detection and automation Must Have One of the Following J3 Certifications

Tier 2 Response:
GCIH – Incident Handler
GCFA – Forensic Analyst
GCFE – Forensic Examiner
GREM – Reverse Engineering Malware
GISF – Security Fundamentals
GXPN – Exploit Researcher and Advanced Penetration Tester
GWEB – Web Application Defender
GNFA – Network Forensic Analyst
OSCP (Certified Professional)
OSCE (Certified Expert)
OSWP (Wireless Professional)
OSEE (Exploitation Expert)
CCFP – Certified Cyber Forensics Professional
CISSP – Certified Information Systems Security
CCNA Security
CCNP Security
CEH – Certified Ethical Hacker
CHFI – Computer Hacking Forensic Investigator
LPT – Licensed Penetration Tester
ECSA – EC-Council Certified Security Analyst
ENSA – EC-Council Network Security Administrator
ECIH – EC-Council Certified Incident Handler
ECSS – EC-Council Certified Security Specialist
ECES – EC-Council Certified Encryption Specialist
EnCE
Windows Forensic Examinations – FTK WFE-FTK
Computer Incident Responders Course - CIRC
Windows Forensic Examination – EnCase – Counter Intelligence (CI) - WFE-E-CI
Forensics and Intrusions in a Windows Environment -FIWE
Basic Qualifications
The Cyber Threat Detection Engineer SME shall have the following qualifications:

In-depth knowledge of Firewalls/Proxies/Intrusion Detection Systems/ Domain Name Servers/DHCP/VPN and other network technologies and tools
Experience updating, maintaining, and creating IDS variables within a complex enterprise network
Expert in creating, modifying, tuning IDS signatures/SIEM Correlation Searches/yara rules and/or other detection signatures
Familiarity with disk based forensic methodologies, Windows, and Linux forensic artifacts
Experience with Endpoint Detection and Response (EDR) tools such as Carbon Black, Tanium, Crowdstrike, etc
Able to create, modify, update, and maintain Python and Powershell scripts that enhance endpoint detection capabilities
In-depth knowledge of attacker tactics, techniques, and procedures
Author, test, and maintain automation scripts within SOAR platform
The candidate must currently possess a Secret Clearance. In addition to clearance requirement, all CBP personnel must have a current or be able to favorably pass a 5 year background investigation (BI).
BS degree in Science, Technology, Engineering, Math or related field and 8 years of prior relevant experience with a focus on cyber security or Masters with 6 years of prior relevant experience.
Should have 5 years of experience serving as a digital media analyst or as a computer forensic analyst.
Ability to work independently with minimal direction; self-starter/self-motivated Preferred Qualifications

One of the following certifications:
SANS Global Information Assurance Certification (GIAC) Certified Intrusion Analyst (GCIA) SANS Global Information Assurance Certification (GIAC) Certified Forensic Analyst (GCFA)
SANS Global Information Assurance Certification (GIAC) Certified Network Forensic Analyst (GNFA)
Certified Information System Security Professional (CISSP)

Cyber Security Engineer with Security Clearance

1 week ago

Base One Technologies Ashburn, United States

Our Ashburn VA based client is looking for a Splunk Engineer. If you are interested in this opening. Please forward a copy of your updated resume in word format to Work location: Ashburn VA · 222 - Senior Security Engineer (CBP) Must Have One of the Following J3 Certifications Sr ...
Cyber Security Engineer with Security Clearance

3 days ago

Base One Technologies Ashburn, United States

Work location: Ashburn VA · 222 – Senior Security Engineer Must Have One of the Following J3 Certifications Sr. Security Engineer: · CompTIA Advanced Security Practitioner (CASP) · GCIH – Incident Handler · GCWN – Windows Security Administrator · GISF – Security Fundamentals · GI ...
Intern - Cyber Security with Security Clearance

1 week ago

Telos Corporation Ashburn, VA, United States

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets · The reputation of our company rests on the quality of our solutions and the integrity of our people · Explore what you can bring to our solutions in the areas of cyber, cloud and ...
Systems Engineer with Security Clearance

2 weeks ago

Base One Technologies Ashburn, United States

Our Ashburn VA based client is looking for a Systems Engineer. If you are qualified for this position, please email your updated resume in word format to Primary Responsibilities · Perform research on current threats and vulnerabilities. Will be responsible for authoring security ...
Penetration Tester with Security Clearance

2 weeks ago

Base One Technologies Ashburn, United States

Primary Responsibilities · Perform internal and external pentest against systems to determine vulnerabilities and offer mitigation strategies. · Perform web app pentests · Perform vulnerability risk assessment · Perform physical pentests and social engineering · Perform cyber inc ...
Detection Engineer with Security Clearance

1 week ago

Base One Technologies Ashburn, United States

Required Education/Experience · BS degree in Science, Technology, Engineering, Math or related field and 8 years of prior relevant experience with a focus on cyber security or Masters with 6 years of prior relevant experience. Should have 5 years of experience serving as a digita ...
Penetration Tester with Security Clearance

2 weeks ago

Anonymous Employer Ashburn, United States

Primary Responsibilities · • Perform internal and external pentest against systems to determine vulnerabilities and offer mitigation strategies. · • Perform web app pentests · • Perform vulnerability risk assessment · • Perform physical pentests and social engineering · • Perform ...
Detection Engineer with Security Clearance

1 week ago

Base One Technologies Ashburn, United States

Our Ashburn VA based client is looking for a Detection Engineer. If you are qualified for this position. Please email me your updated resume in word format to Work location: Ashburn VA Detection Engineer · Primary Responsibilities · • Identify gaps in malicious activity detection ...
Splunk Engineers with Security Clearance

2 weeks ago

Base One Technologies Ashburn, United States

Our Ashburn VA based client is looking for Splunk Engineers. All Applicants must be US CITIZENS with active Secret /Top Secret Clearance. If you are qualified for these openings, please forward a copy of your updated resume in word format to Work location: Ashburn VA Must Have On ...
Penetration Tester with Security Clearance

1 week ago

Leidos Ashburn, United States

You will need to login · before you can apply for a job. · Penetration Tester with Security Clearance · R– Description The Leidos Digital Modernization Team is seeking a Penetration Tester to join the Enterprise Security Operations Center team. The Department of Homeland Securi ...
Cloud Architect with Security Clearance

1 week ago

Booz Allen Hamilton Ashburn, United States

Job Number: R Cloud Architect · The Opportunity: Everyone is trying to "harness the cloud," but not everyone knows how. As a cloud computing application architect, you know how to create a cloud-based technical architecture that meets client needs and takes advantage of cloud cap ...
Project Manager with Security Clearance

1 week ago

Agile Defense, Inc. Ashburn, VA, United States

At Agile Defense we know that action defines the outcome and new challenges require new solutions · That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next · Our vision is to bring adaptive innovation to sup ...
Georgian Linguist with Security Clearance

1 week ago

The KACE Company, LLC Ashburn, United States

TITLE: Georgian Linguist LOCATION: Nationwide TDY; Ashburn, VA; El Paso, TX SCHEDULE: Varied About KACE: When you make the decision to join KACE, you are choosing to work alongside talented professionals that have one thing in common; the passion to make a difference KACE employe ...
Penetration Tester with Security Clearance

1 week ago

Agile Defense, Inc. Ashburn, United States

At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to suppo ...
Penetration Tester with Security Clearance

3 days ago

Anonymous Employer Ashburn, United States

Primary Responsibilities · • Perform internal and external pentest against systems to determine vulnerabilities and offer mitigation strategies. · • Perform web app pentests · • Perform vulnerability risk assessment · • Perform physical pentests and social engineering · • Perform ...
Splunk Engineer with Security Clearance

1 week ago

Agile Defense, Inc. Ashburn, United States

At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to suppo ...
Penetration Tester with Security Clearance

3 days ago

Base One Technologies Ashburn, United States

Primary Responsibilities · Perform internal and external pentest against systems to determine vulnerabilities and offer mitigation strategies. · Perform web app pentests · Perform vulnerability risk assessment · Perform physical pentests and social engineering · Perform cyber inc ...
DevOps Lead with Security Clearance

1 week ago

Booz Allen Hamilton Ashburn, United States

Job Number: R DevOps Lead · The Opportunity: · As a DevOps engineer, you know how to set up cloud environments and provision computer networking, storage, and virtual networks-ultimately, how to "harness the cloud." We're looking for a seasoned DevOps infrastructure engineer like ...
Test Engineer with Security Clearance

2 weeks ago

CACI Ashburn, United States

Test Engineer Job Category: Engineering Time Type: Full time Minimum Clearance Required to Start: Secret Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local * * * What You'll Get to Do CACI's Agile Solution Factory (ASF) is hiring an experienced ...
Test Engineer with Security Clearance

1 week ago

CACI Ashburn, United States

Test Engineer Job Category: Engineering Time Type: Full time Minimum Clearance Required to Start: Secret Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local * * * What You'll Get to Do CACI's Agile Solution Factory (ASF) is hiring an experienced ...