Content Developer Detection Engineer DoD Top Secret

Peraton is seeking a motivated Content Developer / Detection Engineer to join our team in support of the U.S. Army Regional Cyber Center - Europe (RCC-E) services program.

Location: Wiesbaden Germany

In this role you will:

• Create analytics with a SIEM to identify patterns anomalies and compromising indicators to alert CyberIncident responders.
• Create dashboards in the SIEM platform to tip analysts to malicious activities directed against the DoD information systems.
• Create dashboards and report in the SIEM platform to assist network defenders in identifying issues and concerns.
• Perform daily review of analytic performance on the SIEM identifying correlation engine slowdowns.
• Evaluate intrusion detection sensor configurations for proper alert capability.
• Evaluate intrusion detection signature for appropriateness to DoD networks and implement rules as required.
• Contribute to the design development and implementation of countermeasures system integration and tools specific to Cyber and Information Operations.
• Assist in the integration of additional security platforms to correlate new data with HIDS and NIDS alerts.
• Prepare and presents technical reports and briefings.
• Write reports on capabilities of the defensive cyber operations to increase customer situational awareness and improve the customers cyber security posture.
• Write and update SOP and TTPs as required by the local customer.

Requirements:

• Bachelors degree in a STEM field or Business Administrationand a minimum of 3 years experience in Systems Engineering.
• Must be able to qualify for Technical Expert Status Accreditation (TESA) by having a bachelors degree in a STEM or Business field plus 3 years of specialized experience OR an Associates degree plus 7 years of specialized experience.
• Experience in developing dashboards and creating and maintaining Elasticsearch rules.
• Experience with intrusion detection systems such as Snort Suricata and TippingPoint.
• Active DoD Approved 8140 Certification in:
  
  • DCWF 521 Intermediate (B.S. in IT or one of the following: GMON GRID CEH Cloud CySA GSECSecurity PenTest SSCP).
  • 8140 Residential Certification: Any one of the following: GDAT GDSA Elastic Certified ArcSight ESM Advanced Analyst Certified Expert Microsoft Certified: Cybersecurity Architect Expert Azure DevOps Engineer Expert TCM Security PNPT.
• U.S. citizenship required.
• An Active DoD Top Secret security clearance with SCI eligibility.

Preferred:

• Experience with one or more scripting languages: PowerShell Bash Python.
• Experience working with Gitlab.
• Familiarity with ATT&CK Navigator and the MITRE ATT&CK (Adversarial Tactics Techniques and Common Knowledge) matrices.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider we deliver trusted highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land sea space air and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day our employees do the cant be done by solving the most daunting challenges facing our customers. Visit to learn how were keeping people around the world safe and secure.