CYBER THREAT ANALYST (ICS/SCADA) at EOA Technologies LLC

Fort Meade, Maryland, United States -

Full Time

Start Date

Immediate

Expiry Date

09 Sep, 26

Salary

0.0

Posted On

11 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

ICS/SCADA, Threat Analysis, Network Forensics, SIEM, TCP/IP, Wireshark, Zeek, Snort, XKS, Elastic, Splunk, Packet Capture Analysis, Vulnerability Prioritization, Technical Reporting, Intelligence Analysis, Insider Threat Detection

Industry

IT Services and IT Consulting

Description

Description EOA Technologies is seeking a Cyber Threat Analyst with subject matter expertise in industrial control systems and critical infrastructure (ICS/SCADA) to join our team. In this role you will be focused on conducting continuous research on emerging threats and threat actor activity to identify and assess the capabilities and activities of cyber criminals and/ or foreign intelligence entities. You will work as part of a team that analyzes data and prioritizes vulnerabilities with the goal to prevent and eradicate threats to critical U.S. systems. Requirements To be considered for this position you must have the following: Possess an active TS/SCI with Polygraph security clearance Must have a Bachelor’s Degree in computer science, international relations, information security, or a related field. Master’s Degree is preferred but not required. Minimum of Seven (7+) years’ experience working in the areas of intelligence, information security, network forensics or insider threat with focus on Industrial Control Systems/Supervisory Control and Data Acquisition (ICS/SCADA) systems. Subject matter expertise understanding the unique components, protocols, and architectures of ICS/SCADA systems. Ability to understand data in various formats to extract and enrich information to enhance its value. Experience working with development teams to articulate requirements/enhancements to capabilities and tools. Experience with XKS creating general queries, fingerprinting, and identifying atypical events. Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards. Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark Familiarity writing signatures in Zeek and/or Snort Document findings and create detailed reports to ensure tradecraft is continually updated. Present results to technical and non-technical stakeholders. Employment decisions are based solely on qualifications, merit, and business needs - not on any protected characteristic. EOA Technologies, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, ancestry, marital status, religious affiliation, hairstyle, or any other characteristic protected by federal, state or local laws. EOA is committed to providing reasonable accommodations when feasible to individuals with disabilities.

Responsibilities

Conduct continuous research on emerging threats and threat actor activity to protect critical U.S. systems. Analyze data and prioritize vulnerabilities to prevent and eradicate threats to ICS/SCADA environments.