Cyber Incident Response Analyst - ( Snort, Yara signatures)

Company: BAE Systems, Inc.
Location: Reston
Posted on: February 19, 2021

Job Description:

BAE Systems Global Security Operations Center has a job opening for a senior Cyber analyst to focus on intrusion detection and content creation/tuning. This role requires strong experience in incident Response / Analysis and an ability to review and interpret host-based alerting.This is an exciting opportunity to work with a highly motivated team of cyber security professionals located in our Reston, VA location. Technical requirements: IDS monitoring/analysis and content creation with tools including Snort and Yara - must be able to read and write Snort, Regex & Yara signatures at an intermediate/advanced level.
Experience with targeted cyber attack analysis.
In-depth knowledge of HTTP and headers, SMTP and headers, FTP, SSH, TLS.
Ability to read and interpret PCAP data both in a GUI and in hexdump format.
Wireshark, tcpdump, Snort, Yara, SIEM.
Scripting experience with Python or similar preferred
In-depth understanding of network security devices/appliances and their operation
Experience with SIEM platforms (ArcSight) - Including content creation (channels, rules, reports).
Ability to perform both static and dynamic malware analysis at a basic level preferred.

Preferred Skills and Education
Python/Perl/PowerShell ScriptingCompTIA Network+CCENT/CCNAOSCP/OSCEGCIH/GPEN/GCFA/GCFE/GWAPT


BAE job #: 59604BR

Keywords: BAE Systems, Inc., Reston , Cyber Incident Response Analyst - ( Snort, Yara signatures), Professions , Reston, Virginia