Cyber Incident Responder
vor 2 Monaten
Today
- Top Secret/SCI
- Unspecified
- Unspecified
- IT - Security
Wiesbaden Erbenheim Hesse** (ON-SITE/OFFICE)**
**About Peraton**
**Responsibilities**
**Location: Wiesbaden, Germany**
**In this role, you will**:
- Work as an expert to perform analysis of cyber relate events to detect and deter malicious actors using SIEM technologies focused on the threat to networked weapons platforms and U.S. DoD information networks.
- Need to be able to support this position having the potential to work multiple shifts in a rotational schedule.
- Analyze host and network events to determine the impact on current operations, conduct research to determine advisory capability, and develop analytics based on indicators of compromise to leverage the SIEM.
- Produce high-quality papers, presentations, recommendations, and findings for senior US government intelligence and network operations officials.
You will have the opportunity to:
- Perform documentation and vetting of identified vulnerabilities for operational use.
- Monitor and action SIEM platforms for alerts, events, and rules providing insight into malicious activities and/or security posture violations.
- Review intrusion detection system alerts for anomalies that may pose a threat to the customer's network.
- Identify and investigate vulnerabilities, asses exploit potential, and suggest analytics for automation in the SIEM engines.
- Report events through the incident handling process of creating incident tickets for deeper analysis and triage activities.
- Issue triage steps to local touch labor organizations and Army units to mitigate or collect on-site data.
- Develop unique queries and rules in the SIEM platforms to further detection for first line cyber defenders.
- Provide daily updates to Cyber Security Service Provider Division higher staff on intrusion detection operation and trends of events causing incidents.
- Draft reports of remotely exploitable vulnerabilities to increase customer situational awareness and improve the customer's cyber security posture.
- Assist all sections of the Cyber Security Service Provider Division as required in performing Analysis and other duties as assigned.
**Qualifications**
**Required**:
- BA/BS in Engineering, Computer Science, Science, Business Administration or Mathematics and 2 years of specialized experience, or an Associate's degree and 5 years of specialized experience. An additional 4 years ofexperience may be considered in lieu of education/degree.
- Experience in packet captures and analyzing a network packet.
- Experience with intrusion detection systems such as Snort, Suricata, and Zeek.
- Experience with the Elastic SIEM.
- Ability to work independently as well as part of a team.
- Ability to work on shift rotation to assist the team.
- Must have a full, complete, and in-depth understanding of all aspects of Defensive Cyber Operations.
- Must be fluent in all aspects of government and corporate communications media to include all MS Officeproducts and common task ticketing systems.
- Must have a good breadth of knowledge of common ports and protocols of system and network services.
- Must have the demonstrated ability to communicate with a variety of stakeholders in a variety of formats.
- DoD 8140 DCWF 531 & 511 certified in ONE of the following, OR, have the ability to obtain within 30-days ofhire:
- DCWF 531 - B.S.+ or GCFA, GCIA, CCSP, CEH, CFR, Cloud+, CYSA+, GCED, GICSP, PenTest+
- DCWF 511 - B.S.+ or GCFA, GCIA, CFR, Cloud+, CYSA+, GCED, PenTest
- One of the following within 30-days of hire:
- Cisco CyberOps Professional, GCED, GCFA, GCFE, GCIH, GNFA, DCITA CIRC, Blue Team level 1,FIWE or Offensive Security OSDA.
- U.S. citizenship required.
- An active Top Secret with SCI security clearance.
**Preferred**:
- Experience with writing Snort or Suricata IDS rules.
- Experience in developing complex dashboards, report, and automated searches in Elastic/Kibana.
- Experience with analyzing packets using Arkime.
- Experience with Microsoft Windows event IDs.
- Experience with Linux audit log analysis.
- Familiarity with Git and VScode.
- Experience with one or more scripting languages such as PowerShell, Bash, Python.
**Target Salary Range**
$66,000 - $106,000. This represents the typical salary range for this position based on experience and other factors.
**SCA / Union / Intern Rate or Range**
**EEO**
An Equal Opportunity Employer including Disability/Veteran.
**Our Values**
**Benefits**
At Peraton, our benefits are designed to help keep you at your best beyond the work you do with us daily. We're fully committed to the growth of our employees. From fully comprehensive medical plans to tuition reimbursement, tuition assistance, and fertility treatment, we are there to support you all the way.
- Paid Time-Off and Holidays
- Retirement
- Life & Disability Insurance
- Career Development
- Tuition Assistance and Student Loan Financing
- Paid Parental Leave
- Additional Benefits
- Medic
-
Sicherheitsingenieur für Incident-Management
vor 1 Monat
Wiesbaden, Hessen, Deutschland HZD Hessische Zentrale für Datenverarbeitung VollzeitBei der Hessischen Zentrale für Datenverarbeitung (HZD) suchen wir einen Sicherheitsingenieur für das Incident-Management.Beschreibung des Unternehmens:Die HZD ist ein Full-Service-Provider des Landes Hessen mit über 50 Jahren Erfahrung in der Informations-/Kommunikationstechnik. Wir gestalten den Digitalisierungsprozess der hessischen Landesverwaltung...
-
Csirt Security Incident Handler
vor 1 Monat
Wiesbaden, Deutschland HZD Hessen VollzeitEinsatzort ist unsere Zentrale in Wiesbaden. Wir freuen uns auf Ihre Bewerbung (Kennziffer D2-22214709), die wir bis einschließlich 13. Dezember 2024 entgegennehmen. Öffnet sich in einem neuen Fenster Öffnet sich in einem neuen Fenster Öffnet sich in einem neuen Fenster Öffnet sich in einem neuen Fenster Öffnet sich in einem neuen Fenster Ihre...
-
Information Technology Specialist
Vor 5 Tagen
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Serve as Information Security Officer Specialist in the Cyber Security Division of the 102nd Signal Battalion under the 2nd Signal Brigade. - Focus on information system/cyber security issues within the organization's area of responsibility. - Serve as POC for the information systems/cyber security network analysts in the Cyber Security...
-
Information Technology Specialist
vor 7 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Incumbent serves as a Collaboration Support Specialist in the Network Management Branch, Regional Cyber Center - Europe. - Selectee proactively coordinates and carries out the activities and processes required to implement, operate, and maintain premier collaboration services as a Network Operations Specialist. - Builds, tests, and delivers...
-
Information Technology Specialist
vor 7 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Maintain continuous oversight of all Theater communications and data network in support of the United States Army Europe. - Technically evaluates the adequacy and effectiveness of systems troubleshooting, fault isolation and service restoration to ensure appropriate measures and resources are allocated to effectively and efficiently restore...
-
Supervisory Personnel Support Specialist
vor 7 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Serves as the primary personnel specialist at 102nd Signal Battalion. - Provides staff advisory services to management and employees on the full range of command personnel programs. - Responds to difficult issues involving complex projects/problems that require expert attention and provides guidance and assistance to subordinate...
-
Information Specialist
vor 7 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Serves as a Senior IT Specialist within the Enterprise Service Desk. - Leverages people, processes and technology to provide premier IT service for customers. - Responsible for incident management for the lifecycle of incidents for Tier 1 remote computer desktop support. - Maintains all new or updated software releases in the production...
-
Information Technology Specialist
vor 2 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Incumbent serves as a Collaboration Support Specialist in the Network Management Branch, Regional Cyber Center - Europe. - Selectee proactively coordinates and carries out the activities and processes required to implement, operate, and maintain premier collaboration services as a Network Operations Specialist. - Builds, tests, and delivers...
-
Information Technology Specialist
vor 7 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Serves as IT Specialist/Database Administrator for the Regional Cyber Center-Europe, Enterprise Data Services Team. - Provides design, management and improvement of the SQL as a Service Enterprise architectures. - Serves as an Information Technology Specialist performing work, independently and as a member of a team, in the administration,...
-
Information Technology Specialist
vor 3 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Maintain continuous oversight of all Theater communications and data network in support of the United States Army Europe. - Technically evaluates the adequacy and effectiveness of systems troubleshooting, fault isolation and service restoration to ensure appropriate measures and resources are allocated to effectively and efficiently restore...
-
Information Technology Specialist
Vor 5 Tagen
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Responsible for advising the organization?s senior leaders and other staff elements on SharePoint, knowledge management (KM), web development and sustainment, business intelligence (BI) and information Architecture matters. - Develop and recommend policy and guidance for improved intranet information architecture in terms of usability,...
-
Linux System Administrator
vor 6 Monaten
Wiesbaden, Deutschland SOSi Vollzeit**Overview**: **Responsibilities**: - Evaluates, tests, recommends, coordinates, monitors and maintains information systems (IS) and cyber security policies, procedures and systems, including access management for hardware, firmware and software - Ensures that IS and cyber security plans, controls, processes, standards, policies and procedures are aligned...
-
Linux System Administrator
vor 7 Monaten
Wiesbaden, Deutschland SOSi Vollzeit**Overview**: - SOS International LLC (SOSi) is seeking a highly qualified**Responsibilities**: - Evaluates, tests, recommends, coordinates, monitors and maintains information systems (IS) and cyber security policies, procedures and systems, including access management for hardware, firmware and software - Ensures that IS and cyber security plans,...
-
Spezialist / Spezialistin Entwicklung & Projekte
vor 3 Monaten
Wiesbaden, Deutschland P&I Personal & Informatik AG VollzeitAls erstes HR-Cloud-Datacenter seiner Art bietet P&I mit seiner Security-of-the-Cloud-Strategie einen einfachen Zugang zu umfassender, hochmoderner Datensicherheit in der Cloud. Specialist IT-Sicherheit (m/w/d) AUFGABEN Betreuung, Konsolidierung und Weiterentwicklung verteilter Netzwerkinfrastrukturen sowie der Firewall-Systeme Cyberthreat Hunting und...
-
Linux System Administrator
vor 4 Monaten
Wiesbaden, Deutschland SOSi Vollzeit**Overview** **Essential Job Duties** - Evaluates, tests, recommends, coordinates, monitors and maintains information systems (IS) and cyber security policies, procedures and systems, including access management for hardware, firmware and software - Ensures that IS and cyber security plans, controls, processes, standards, policies and procedures are aligned...
-
Specialist IT-Sicherheit
vor 3 Monaten
Wiesbaden, Deutschland P&I Personal & Informatik AG VollzeitMit der HR-Plattform P&I LogaHR für integrierte und automatisierte Personalarbeit prägt die P&I AG die HR-Branche und gilt mit ihrem Leitsatz »Rethink HR« als Marktpionier in Deutschland. Als erstes HR-Cloud-Datacenter seiner Art bietet P&I mit seiner Security-of-the-Cloud-Strategie einen einfachen Zugang zu umfassender, hochmoderner Datensicherheit in...
-
Information Technology Specialist
Vor 7 Tagen
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Manage multiple Army Enterprise Data Centers (AEDC) consisting of Cisco Application Centric Infrastructure (ACI), Cisco Nexus fabric switches, Fabric Extension Switches, Cisco Catalyst switches, and BIP-IP F5 Load Balancers - Develop and integrate scripted and programmed capabilities and frameworks to automate various network management...
-
Supervisory Information Technology Specialist
vor 7 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Serves as the SQL Database Team Security Control Assessor by providing comprehensive assessments of the management, operational, and technical security controls and control enhancements employed throughout the Enterprise Microsoft SQL environment. - Database maintenance plan creation, programming in Transact Structured Query Language (TSQL),...
-
Information Technology Specialist
vor 3 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Perform short and long-range Information Technology exercise planning with development of associated processes that cover the organizations Information Technology program. - Ensure the Information Technology program is compliant with higher authority policies and guidelines. - Review, coordinate, and advise on existing and new...
-
Information Technology Specialist
vor 7 Monaten
Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit**Duties**: - Serves as a staff action IT Plans/Projects/Exercises officer for the Plans and Exercise Division within the 2d Theater Signal Brigade. - Focuses on theater exercises with a high degree of technical judgement in customer service, problem resolution and network design/configuration. - Establishes, interprets and applies policy for the United...
