Responsibilities:
Peraton is currently seeking a Cloud Monitoring Analyst to support the CIRT Team in supporting the Department of States (DoS) Computer Incident Response Team leveraging deep knowledge of computer forensic techniques, malware analysis and monitoring / incident response to work with key stake holders in an effort to develop methodologies and processes to support the Departments migration and integration of cloud-based services.
Location: Rosslyn, VA and Beltsville, MD. The customer requires every employee to be on-site for the first 90 days. After the 90 day period, a hybrid schedule may be offered. This position will support Monday Friday from 8:00am to 5:00pm. ?
What you'll do:
- Implement cyber monitoring capabilities within our SIEM and detection tools.
- Develop and enhance threat dashboards and advanced analysis capabilities.
- Provide tuning of threat detection tools.
- Understand and develop cyber monitoring within cloud environments
- Utilize on-premises and cloud-based tools for analysis of devices and networks
- Onboard and integrate cyber monitoring tools from the analysts perspective.
- Coordinate with engineers to assist in building and maintaining platforms.
- Coordinate with cyber threat experts to implement the latest signatures.
- Maintain Splunk dashboards and reports.
- Maintain an understanding of cloud development with Microsoft Azure, Amazon AWS, and Google Cloud environments.
- Maintain an understanding of Machine Learning and User and Entity Behavior Analytics.
Qualifications:
Basic Qualifications:
- Bachelors degree and at least 2 years of experience or a High School diploma and 6 years of experience.
- Must possess one of the following certifications by start date: CCNA, CND, CySA+, Security+ CE, Cloud+, GICSP, GSEC, or SSCP.
- Ability to think critically, providing perspective when conducting analysis inside a large enterprise.
- Knowledge of cloud services, most notably how to properly secure cloud environments from common and unique threats.
- Ability to resolve highly complex malware and intrusion issues using computer host analysis, forensics, and reverse engineering.
- Ability to recommend sound counter measures to malware and other malicious type code and applications which exploit customer communication systems.
- Knowledge in development of policies and procedures to investigate malware incidents for an entire computer network.
- Experience and understanding of security-related artifacts and controls within Windows, Linux and Macintosh operating systems
- Incident Response experience utilizing SIEM and EDR tools
- Working knowledge of Splunk Query Language, Kusto Query Language, SQL
- Must have an active Secret clearance.
- US Citizenship required
Preferred Qualifications:
- Familiarity with monitoring Cross Domain Solutions
- Familiarity with Azure/MDE and Splunk
- Understanding of Security Operations Center processes and workings.
Peraton Overview:
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the cant be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how were keeping people around the world safe and secure.
Target Salary Range: $80,000 - $128,000. This represents the typical salary range for this position based on experience and other factors.