Cyber Countermeasures Engineer
Fort Meade, MD 
Share
Posted 19 days ago
Job Description
Cyber Countermeasures Engineer
Job Locations US-MD-Ft. Meade
ID 2023-9064 # of Openings 1 Category Cyber Clearance Tier 5 - Top Secret/ADP I
Overview

By Light provides a broad range of hardware, software, engineering, and IT integration services. Headquartered in McLean, VA, we support defense, civilian, commercial, and health IT customers worldwide.

Responsibilities

    Provide direct mission support to government customers at Ft. Meade, MD.
  • Serve as the cyber countermeasure Subject Matter Expert for a new cyber capability.
  • Work directly with customer and commercial vendor cyber fusion/threat analyst teams to develop effective countermeasures addressing a wide range of priority and/or emerging cyber threats.
  • Ensure countermeasures are effective in supporting desired mission outcomes.
  • Provide critical integration between customer and commercial vendors teams

Analyze signatures (ex. YARA, Snort) in Cyber Threat Intelligence or DoD orders and assess new capability coverage for these threats.

Required Experience/Qualifications

* Primary duty location is Joint Force Headquarters (JFHQ), Ft. Meade, MD.

* 2+ years of experience in cyber analyst role

* Experience conducting malware analysis

* Experience developing behavioral threat signatures, such as YARA rules

* Experience with cyber operations and cyber operation planning processes

* Understands malicious cyber actor TTPs to include initial access and command-and-control

* Understands how to use cyber security tools and data to conduct defensive cyber operations

* Understands cyber threats and cyber threat frameworks such as Cyber Kill Chain and MITRE ATT&CK framework

* Understands Cyber Threat Intelligence (CTI) and how to integrate CTI into defensive cyber operations

Preferred Experience/Qualifications

* Hands on SIEM experience, preferably with Splunk, to include configuration, query development, log review/analysis, and correlation of event data

* 5+ years of experience in cyber analyst role, preferably supporting DGFC or JFHQ

* Experience with regex and signature development

* Experience with coding/scripting

* Cybersecurity certifications such as CISSP and/or GIAC certifications

* Splunk certifications

Special Requirements/Security Clearance

* Minimum Active Secret Clearance.

* Active TS and TS/SCI clearances are preferred


An Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

 

Job Summary
Start Date
As soon as possible
Employment Term and Type
Regular, Full Time
Required Experience
2+ years
Required Security Clearance
Top Secret
Email this Job to Yourself or a Friend
Indicates required fields