Cyber Countermeasures Engineer at Granted

, , United States -

Full Time

Start Date

Immediate

Expiry Date

13 Feb, 26

Salary

0.0

Posted On

15 Nov, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber Analyst, Malware Analysis, Behavioral Threat Signatures, Cyber Operations, Cyber Operation Planning, Malicious Cyber Actor TTPs, Cyber Security Tools, Defensive Cyber Operations, Cyber Threats, Cyber Threat Frameworks, Cyber Threat Intelligence, SIEM, Splunk, Regex, Scripting, Cybersecurity Certifications

Industry

IT Services and IT Consulting

Description

Overview By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide. Responsibilities Provide mission support, as necessary for a new cyber capability Serve as the cyber countermeasure Subject Matter Expert for a new cyber capability. Work directly with commercial vendor cyber fusion/threat analyst teams to develop effective countermeasures addressing a wide range of priority and/or emerging cyber threats. Ensure countermeasures are effective in supporting desired mission outcomes. Provide critical integration for commercial vendors teams Analyze signatures (ex. YARA, Snort) in Cyber Threat Intelligence or DoD orders and assess new capability coverage for these threats Qualifications 2+ years of experience in cyber analyst role Experience conducting malware analysis Experience developing behavioral threat signatures, such as YARA rules Experience with cyber operations and cyber operation planning processes Understands malicious cyber actor TTPs to include initial access and command-and-control Understands how to use cyber security tools and data to conduct defensive cyber operations Understands cyber threats and cyber threat frameworks such as Cyber Kill Chain and MITRE ATT&CK framework Understands Cyber Threat Intelligence (CTI) and how to integrate CTI into defensive cyber operations Preferred Qualifications Hands on SIEM experience, preferably with Splunk, to include configuration, query development, log review/analysis, and correlation of event data 5+ years of experience in cyber analyst role, preferably supporting DGFC or JFHQ Experience with regex and signature development Experience with coding/scripting Cybersecurity certifications such as CISSP and/or GIAC certifications Splunk certifications Special Requirements/Security Clearance Active TS/SCI clearance required

Responsibilities

Provide mission support for a new cyber capability and serve as the cyber countermeasure Subject Matter Expert. Work with commercial vendor teams to develop effective countermeasures for emerging cyber threats.