ABOUT PERATON

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

MINIMUM QUALIFICATIONS:

• Minimum of 2 years experience in Cyber Systems Engineering with a Bachelor’s degree in a STEM field; High School and a minimum of 6 years of experience in lieu of degree may be considered.
• Must be able to qualify for Technical Expert Status Accreditation (TESA) by having a bachelor’s degree in a STEM field plus 3 years of specialized experience OR an associate’s degree plus 7 years of specialized experience OR a major certification plus 7 years of specialized experience.
• Active DoD Approved 8140 Certifications in three categories:
• DCWF: 531 Intermediate (IT related B.S. or one of the following: Cisco CyberOps Pro, CCSP, CEH, Cloud+, FIRSP-O, GCED, GCIH, GISF, GSEC, PenTest+, Security+, or DCWF 531 Advanced Certification),
• DCWF: 511 Intermediate (IT related B.S. or one of the following: Cloud+, GCED, GFACT, GISF, GSEC, PenTest+, Security+, or DCWF 511 Advanced Certification), and
• 8140 Residential certification within 90 days of hire (Cisco CyberOps Pro, a SANS GIAC Cert, Blue Team level 1, or Microsoft Certified: Security Operations Analyst Associate).
• Fluent in all aspects of government and corporate communications media to include all MS Office products and common task ticketing systems.
• U.S. citizenship required.
• An Active DoD Top Secret/SCI security clearance.

PREFERRED QUALIFICATIONS:

• Experience with the Elastic SIEM.
• Experience in Microsoft MDE, XDR, or Sentinel.
• Experience in packet captures and analyzing a network packet.
• Experience with intrusion detection systems such as Snort, Suricata, and Zeek.
• Experience with Microsoft Windows event IDs.
• Experience with Linux audit log analysis.
• Familiarity with Git and VScode.
• Strong understanding of adversary tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.
• Experience with one or more scripting languages such as PowerShell, Bash, Python.

ABOUT THE ROLE

Peraton is currently seeking an experienced Cyber Incident Handling Analyst to join our team in support of the U.S. Army Europe Regional Cyber Center (RCC-E).

ROLE & RESPONSIBILITIES:

This role supports integrated cyber defense efforts by coordinating security toolsets to sustain continuous monitoring and ongoing authorization programs.

ADVANCED ANALYSIS AND EXPERT RESPONSIBILITIES:

• Utilize SIEM technologies for advanced cyber forensics to detect and deter malicious actors targeting networked weapons platforms and U.S. DoD networks.
• Analyze host and network events to assess operational impact and advisory capabilities.
• Develop analytics based on indicators of compromise and perform forensic investigations by dissecting host data to determine the root causes, tactics, techniques, and tools used in cyber intrusions.
• Prepare high-quality strategic reports, presentations, and recommendations for senior U.S. government intelligence and network operations officials.