Cyber Intrusion Detection System Administrator - TS​/SCI Polygraph at General Dynamics Info

Cyber Intrusion Detection System Administrator – TS/SCI with Polygraph

Own your opportunity to serve as a critical component of our nation’s safety and security.

• Lead, manage, and support customers’ cyber tool stack and implement defensive rules.
• Collaborate with other government agencies to record and prepare incident reports and analysis methodology.
• Provide insight to Detection and Response teams on signature functionality and provide signature tuning.
• Monitor and analyze signature alerts from IDS/IPS for false positives.
• Create Splunk dashboards and leverage Splunk, Snort signatures, PCRE, Yara rules, Suricata, Palo Alto firewalls, Fidelis, SQL, Python, and statistical modeling.
• Provide guidance and work leadership to less‑experienced staff.

• BS degree or equivalent experience.
• 8+ years of related experience in cybersecurity.
• Proficiency with Perl Compatible Regular Expressions (PCRE), authoring Yara rules, snort signatures, and intrusion detection/prevention systems.
• Experience utilizing Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto firewalls, Fidelis, SQL, Python, and statistical modeling.
• TS/SCI clearance with CI Polygraph.
• U.S. citizenship required.
• Work performed directly at customer site.

8+ years of related experience.

Certification:
See job posting.

Travel:
Less than 10 %.

Citizenship: U.S. citizenship required.