Cyber Security Engineer Job at Peraton, Fort Huachuca, AZ

dlZWWURCVGlYK0hhM3lRaUk1UHZRbVJSUGc9PQ==
  • Peraton
  • Fort Huachuca, AZ

Job Description

Program Overview

About The Role

Secure Division Support. The GCC provides CSSP responsibilities and conducts DODIN Operations and DCO – Internal Defensive Measures (IDM) to protect the DODIN IAW the DoDM 8530.01 and the DoD Cybersecurity Services Evaluator Scoring Metrics (ESM). These responsibilities are broken into five (5) CSSP functions; Identify, Protect, Detect, Respond, and Recover. GCC is responsible to conduct these functions for its assigned portion of the DODIN for both unclassified and classified networks/ systems. The division provides support services for the protection, monitoring, analysis, detection, and response to unauthorized activity within the DoD Information Systems and Networks. DCO-IDM services are required to defend against unauthorized activity on all Army assets residing on the NIPRNet and SIPRNet. The division provides defensive measures to protect and defend information, computers, and networks from disruption, denial, degradation, or destruction. The division provides sensor management and event analysis and response for network and host-based events. For sensor management, the division provides management of in-line Network Intrusion Protection System/Network Intrusion Detection System (NIPS/NIDS) sensors monitoring all CONUS DoDIN-A NIPRNet and SIPRNet Enterprise traffic to detect sensor outages and activities that attempt to compromise the confidentiality, integrity, or availability of the network. In coordination with GCC Operations, DCO initiates defensive security procedures upon detection of these attacks. Event analysis and response includes the processes involved with reducing multiple cyber incidents to actual malicious threat determinations and mitigating those threats IAW guidance received from GCC Government leadership. Support the Government in providing services for CSSP services on both the NIPRNet and SIPRNet IAW Appendix E: Secure Division Workload Assessment in support of the CONUS portion of the DoDIN-A. Develop reports and products, both current and long-term, in support of CSSP and course of action development. Prepare Tactics, Techniques, and Procedures (TTP), SOPs, Executive Summary (EXSUMS), trip reports, and information/point papers. Contribute during the preparation of agreements, policy, and guidance documentation such as Memorandums of Understanding / Agreement (MOU/A), Service Level Agreements (SLA).
• Defensive Cyber Infrastructure (DCI) Support. Perform the following DCI functions:
• Develop and distribute content provided by security platform vendors at least weekly and as needed.
• Develop and distribute in-house content based on tippers from higher organizations and the Threat Hunt team.
• Provide content development and distribution to tactical edge customers and develop TTPs for doing so.
• Consolidate different data sources into a single view used to assess the status of a specific threat on the network.
• Develop and/or maintain dashboards displaying specific CSSP items of interest (i.e. top 10 attackers, top 10 destinations, top attack vector, etc.) and all active cyber incidents, in near real time, within each respective AOR.
• Maintain, update, test, and implement signatures and policies for each sensor managed by GCC.
• Changes must be approved through the established ITIL process.
• Develop signatures and policies that include both network- and host-based sensors.
• Update as necessary to minimize false positives and validate for proper syntax.
• Conduct all development and testing on isolated networks.
• Document and conduct testing activity with plan procedures, results, and operational procedures as signatures are developed and/or updated.
• Update and validate plan at least annually. A signature test plan shall be developed.

Qualifications

Basic Qualifications:

  • 8 years with BS/BA; 6 years with MS/MA; 3 years with PhD
  • Certifications: DCWF Code 521 Advanced: Certified Information Systems Security Professional (CISSP) or GIAC Certified Intrusion Analyst (GCIA) or GIAC Cloud Security Essentials (GCLD) or GIAC Defensible Security Architecture (GDSA) or GIAC Global Industrial Cyber Security Professional (GICSP) or GIAC Security Essentials Certification (GSEC) or Information Systems Security Architecture Professional (ISSAP) or Information Systems Security Engineering Professional (ISSEP)
  • Active TS/SCI Clearance
  • Ability to conduct vulnerability assessments and monitor networks to support test and operational environment requirements.
  • Solid understanding of data transport, encryption, networking, IT systems, and cybersecurity fundamentals.

SCA / Union / Intern Rate or Range

Details

Target Salary Range: $66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Job Tags

Contract work, Shift work,

Similar Jobs

Paladin Drones

UAS Demo Pilot Job at Paladin Drones

 ...we are dedicated to advancing UAV technology to make a significant impact in this fast-evolving field. Role Summary The Demo Pilot will be responsible for executing Paladin flight demonstrations while ensuring safe and compliant flight operations. The ideal candidate... 

Marshub Co Ltd.

Chinese-French Interpreter Job at Marshub Co Ltd.

1. Minimum 1-3 years of overseas project experience. Preference given to candidates with work experience in French-speaking regions such as Africa or the Middle East. Exceptional candidates may be considered with less overseas experience.2. Proficiency in French-Chinese... 

State of Florida

DEPUTY CHIEF FINANCIAL OFFICER - 55012085 Job at State of Florida

 ...Requisition No:863591 Agency: Department of Transportation Working Title: DEPUTY CHIEF FINANCIAL OFFICER - 55012085Pay Plan: SES Position Number:55012085 Salary: $121,125.02 - $142,500.02 Posting Closing Date: 01/13/2026 Total Compensation Estimator... 

4.0 School Services

School Bus Driver Job at 4.0 School Services

 ...School Bus & Van Driver $1,000 Sign-On Bonus! Paid Training Competitive Pay Bring Your Child to Work Make a positive impact in students lives every day by becoming a driver with 4.0 School Services . Whether youre an experienced CDL driver or brand new... 

Careerscape

Content Writer Job at Careerscape

 ...copy. The content team works with clients in software, cybersecurity, and cloud computing industries. The Content Writer will work remotely with flexibility to manage their own schedule while meeting weekly content deadlines. This role requires someone who can research...