Information Assurance and Security Analyst

Peraton is currently seeking an Information Assurance and Security, Lead Associate

Employee analyzes alerts from various security tools to determine the impact on current operations and identify adversary activity. Develops and implements custom signatures, filters, and rules for IDPS and SIEM technologies to meet changing requirements and ensure maximum operational security. Conducts vulnerability management of the defensive and SIEM architecture to proactively mitigate risks. Produces high-quality analysis, reports, and recommendations for senior cyber defense officials.

Key Responsibilities include

• IDPS Installation and Maintenance: Working directly with customers to configure and install IPS and IDS sensors as well as maintaining sensor platforms with weekly maintenance and updates.
• IDPS Troubleshooting: Monitoring Intrusion Prevention Systems (IPS) and intrusion detection systems (IDS) for alerts and alarms and following Troubleshooting TTP’s and SOP’s for resolution and escalation with vendor.
• Generate IDPS Reports and products: Provide customers with weekly sensor reports and produce products based on sensor statistics.
• Signature Lifecyle management: Analysts will Perform all required organizational requirements including incident, change, problem, and lifecycle management to track policy updates and signature development.
• Signature Development: Research new signatures as they are released by the Vendor. Develop and test custom signatures for inclusion into the policy. Test and deploy signature set to Manager/Sensors to keep the baseline current.
• SIEM Rule management: Develop and test SIEM rules for signatures in the environment. Review SIEM rules and signatures in the environment for modifications. Correlate events in the SIEM to derive information on possible attacks.
• SIEM Configuration: Working with the customers to integrate various log types into the CSSP SIEM and monitoring data feed health.
• Cross-Functional Collaboration: Collaborate effectively with internal teams, including Incident Response, Content and Development, and other security operations teams for ongoing security efforts and response strategies.
• STIG and Compliance support: Conduct weekly STIG checks on team-maintained appliances and servers, provide patch management as well as updating compliance repositories.
• Risk Management: Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the Defensive Cyber infrastructure division. Develop and implement strategies to effectively mitigate and remediate identified risks.

• 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD; 9 years w/o degree; 7 years with Associates.
  Must possess DoW 8140 DCWF 521 intermediate certification at start.
• Ability to obtain a DoD Secret Clearance; however, an active DoD Secret Clearance is preferred.