Prncpl Threat Detect & Rsponse Anlyst - 90376824 - Washington

Your success is a train ride away!

As we move America’s workforce toward the future, Amtrak connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees.

Are you ready to join our team?

Our values of ‘Do the Right Thing, Excel Together and Put Customers First’ are at the heart of what matters most to us, and our Core Capabilities, ‘Building Trust, Accountability, Effective Communication, Customer Focus, and Proactive Safety & Security’ are what every employee needs to know and do to be most impactful at Amtrak. By living the Amtrak values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, together we will honor our past and make Amtrak a company of the future.

COMPANY: National Railroad Passenger Corporation (Amtrak)

TITLE: Principal Threat Detection and Response Analyst

LOCATION: Washington, D.C.

DUTIES: Conducts real-time analysis using the SIEM, Cloud, Endpoint, and network-based technologies as well as other security analytics tools with a focus on identifying security events and false positives. Responsible for gathering and correlating intelligence to develop a deeper understanding of tracked threat activity. Prepares and presents risk analyses and threat findings to appropriate stakeholders. Coordinates with different teams to improve threat detection, response, and improve overall security posture of Amtrak. Applies basic threat hunting techniques to pivot given information to known attack patterns, malicious code families, tracked threat groups, and other historical information. Pivots through open-source and internal frameworks for related data associated with potentially malicious Indicators of Compromise (IoCs) and Indicators of Attack (IoAs). Triages potentially malicious binaries and/or other types of malwares, including familiarity with basic to intermediate static/dynamic analysis techniques.

REQUIREMENTS: Employer will accept a Bachelor’s degree or equivalent in Computer Science, Information Systems, Engineering, Software Development, or a related field followed by seven (7) years of progressive, post-baccalaureate experience in the same role or a related Information Security Analyst occupation. Alternatively, must have a Master’s degree or equivalent in Computer Science, Information Systems, Engineering, Software Development, or a related field followed by five (5) years of progressive, post-baccalaureate experience in the same role or a related Information Security Analyst occupation. Must also have five (5) years of experience: (1) Applying techniques for detecting host and network-based intrusions using intrusion detection technologies; (2) Recognizing, categorizing, assessing, and addressing vulnerabilities, attack vectors, threat tactics, and attacker techniques; (3) Applying incident handling methodologies and performing DFIR; (4) Monitoring, analyzing, and triaging security threats in Azure Cloud and SIEM systems; (5) Configuring and fine-tuning security tools, including firewalls, IDS/IPS, and endpoint detection and response (EDR) solutions; and (6) Performing threat modeling exercises to identify potential security risks and vulnerabilities in systems and applications. Must also have one (1) year of experience: (7) developing security solutions using scripting languages, object-oriented programming, and infrastructure-as-code (IaC), including KQL. All experience may be acquired concurrently. Remote work permitted in accordance with standard company policy. All positions require pre-employment background check verification and a pre-employment drug screen.

SALARY: $160,888 -$179,300 per year

CONTACT: To apply, https://bit.ly/440yjNf Please reference Job Code: 7140524.

Requisition ID:161538

Posting Location(s):District of Columbia

Job Family/Function:Information Technology

Relocation Offered:No

Travel Requirements:0 - 5%

You power our progress through your performance.

We want your work at Amtrak to be more than a job. We want your career at Amtrak to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. Amtrak maintains a culture that values high performance and recognizes individual employee contributions.

Amtrak is committed to a safe workplace free of drugs and alcohol. All Amtrak positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen.

Candidates who test positive for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtrak's pre-employment drug testing program is administered in accordance with DOT regulations and applicable law.

In accordance with DOT regulations (49 CFR

• 25), Amtrak is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered Department of Transportation positions. If an applicant/employee refuses to provide written consent for Amtrak to obtain these records, the individual will not be permitted to perform safety-sensitive functions.

In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C.

• , Amtrak is required to screen applicants for any permanent or interim disqualifying criminal offenses.

Amtrak is an EOE/Affirmative Action Minority/Female employer, and we welcome all to apply. We consider candidates regardless of race/color, religion, sex (including pregnancy, childbirth and related conditions), national origin/ethnicity, age, disability (intellectual, mental and physical), veteran status, marital status, ancestry, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law.