Detection Engineer (Secret Clearance required)

Job Title: Detection EngineerLocation: US-VA-AshburnClearance Required: SecretSalary: $130,888.09

Job Details:Experience Requirements:In-depth knowledge of Firewalls/Proxies/Intrusion Detection Systems/Domain Name Servers/DHCP/VPN and other network technologies and toolsExperience updating, maintaining, and creating IDS variables within a complex enterprise networkExpert in creating, modifying, tuning IDS signatures/SIEM Correlation Searches/yara rules and/or other detection signaturesFamiliarity with disk-based forensic methodologies, Windows, and Linux forensic artifactsExperience with Endpoint Detection and Response (EDR) tools such as Carbon Black, Tanium, Crowdstrike, etcAble to create, modify, update, and maintain Python and PowerShell scripts that enhance endpoint detection capabilitiesIn-depth knowledge of attacker tactics, techniques, and proceduresAuthor, test, and maintain automation scripts within SOAR platform

Requirements:Must currently possess a Secret Clearance.All personnel must have a current or be able to favorably pass a 5-year background investigation (BI).BS degree in Science, Technology, Engineering, Math, or related field and 8 years of prior relevant experience with a focus on cybersecurity or Masters with 6 years of prior relevant experience.Should have 5 years of experience serving as a digital media analyst or as a computer forensic analyst.Certifications

Must have one of the following certifications:CCFP – Certified Cyber Forensics ProfessionalCHFI – Computer Hacking Forensic InvestigatorCISSP – Certified Information Systems Security ProfessionalECSA – EC-Council Certified Security AnalystEnCEGCFA – Forensic AnalystGCFE – Forensic ExaminerGCIH – Incident HandlerGISF – Security FundamentalsGREM – Reverse Engineering MalwareGXPN – Exploit Researcher and Advanced Penetration TesterLPT – Licensed Penetration TesterOSCE (Certified Expert)OSCP (Certified Professional)OSEE (Exploitation Expert)OSWP (Wireless Professional)CIRCFIWEWFE-E-CIFTK-WFE-FTKPreferred Qualifications:One of the following certifications:SANS Global Information Assurance Certification (GIAC) Certified Intrusion Analyst (GCIA)SANS Global Information Assurance Certification (GIAC) Certified Forensic Analyst (GCFA)SANS Global Information Assurance Certification (GIAC) Certified Network Forensic Analyst (GNFA)Certified Information System Security Professional (CISSP)

Job Duties:ISYS Technologies is a reputable technology services company to the Federal Government. Whether the focus is on space exploration, national security, cybersecurity, or cutting-edge engineering applications, ISYS is ready to offer you the chance to make a real-world impact in your field and for your country. We provide long-term growth and development. Headquartered in Colorado, ISYS is engaged in programs across the country and in more than 20 states. Our programs support multiple Federal agencies, the Department of Defense and often focused on the space initiatives of our government customers.Identify gaps in malicious activity detection capabilitiesCreate new signatures/rules to improve detection of malicious activityTest and tune existing signatures/rules to ensure low rate of false positivesAssist in playbook development for alert triage and Incident ResponseDefine and implement alert and threat detection metrics, statistics, and analyticsRecommend new tools/technologies to improve network visibilitySupport Incident Response and Forensic operations as required to include static/dynamic malware analysis and reverse engineeringAuthor and maintain scripts for threat detection and automation