Cyber Systems Firewall Administrator - TS/SCI Clearance
Washington, DC, United States
About Us:
Today's global security environment is a constant of change. Threats can arise from any point on the globe and our military services must be prepared and capable of responding at a moments’ notice. A core force multiplier is the role played by government contracted services. Come join our Service-Disabled Veteran-Owned Small Business team as we continue to serve the nation and the dedicated men and women who came after us.
About the Opportunity:
Joint Enterprise Technologies is currently seeking an experienced Cyber Systems Firewall Administrator with advanced knowledge in applying in-depth sustainment support of enterprise network cyber defense capabilities to prevent sophisticated cyber threats and vulnerabilities, or detection of them when prevention fails. The successful candidate will be responsible for strengthening the defensive posture and cyber defense operational readiness of an IT Enterprise. Our Enterprise Cyber Network Defense Operations (ECNDO) program defends and protects Government assets from external Cyber Security attacks and Insider Threats that can potentially cause or create data, systems, networks, and personnel vulnerabilities.
Required Clearance:
AN ACTIVE DEPARTMENT OF DEFENSE TS/SCI SECURITY CLEARANCE IS REQUIRED IN ORDER TO APPLY.
Willingness to submit to and pass a Counter Intelligence (CI) Polygraph.
Location:
Washington, DC
Reston, VA
Riverdale, MD
Colorado Springs, CO
Functional Duties:
Monitor day-to-day operations of the sensors (Suricata, Palo Alto, and ArcSight) located at supporting customer's locations.
Perform Enterprise Defense Countermeasure (DC) activities and coordinate with other government agencies to record and prepare incident reports and analysis methodology and results.
Monitor and analyze signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives.
Provide technical enforcement of organizational security policies.
Provide "tune-or-drop" recommendations towards the DC team's Signature Lifecycle Review procedure.
Provide insight to Detection and Response teams on signature functionality and providing signature tuning as needed.
Communicate with customers and teammates clearly and concisely.
Maintain current knowledge of relevant technology as assigned.
Participate in special projects as required.
Position is day shift but may require evening, weekend or shift-work (depending on operational tempo).
Required Skills and Abilities:
Experience authoring Snort signatures.
Experience authoring Yara rules.
Experience with Perl Compatible Regular Expressions (PCRE)
Preferred Skills:
Experience in intrusion detection and prevention systems.
Proficient in network security technologies and protocols.
Dashboarding in Splunk.
Required Education and Experience:
HS/GED + 10 years experience
Associates Degree + 8 years experience
Bachelor’s Degree + 6 years experience
Master’s Degree + 4 years experience
PhD + 2 years experience
Required Certifications:
8750 IAT Level II: One of the following certifications is required: CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP
8750 Specialty: CSSP Infrastructure Support; One of the following certifications is required: CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, CND
GIAC: GIAC Continuous Monitoring (GMON)
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. Joint Enterprise Technologies, LLC is a drug-free workplace and participates in E-Verify.
Joint Enterprise Technologies, LLC is an equal access/equal opportunity employer, committed to excellence in service through diversity employment.
Joint Enterprise Technologies, LLC is committed to working with and providing reasonable accommodation to applicants and employees with disabilities. If you feel you require a reasonable accommodation to apply for a position with Joint Enterprise Technologies, LLC, please call 813-436-9946 or e-mail us and let us know the nature of your request, along with your contact information. Reasonable accommodations are considered on a case-by-case basis. Please note that only those inquiries concerning a request will be considered.
Powered by JazzHR