Mid-Level ICS/SCADA Cyber Threat Analyst [$248k/yr+] TS/SCI-FSP

SYSTOLIC, INC.

Annapolis Junction, MD, United States

27 days ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Experienced

Experience required

7 years minimum

Compensation

$248,000.0

Working hours

Regular working hours

Job source

www.clearancejobs.com

Tech stack

Data Analysis Communications Protocols Cyber Security Supervisory Control and Data Acquisition (SCADA) Pcap Network Forensics Security Information and Event Management TCP/IP Wireshark Snort (Software) Cyber Threat Analysis Process Control Systems

+1 more

Splunk

Job description

Conduct cyber threat analysis and research emerging threats.
Assess threat actor capabilities and analyze data to prioritize vulnerabilities.
Prevent and eradicate threats to critical U.S. systems., * Conduct continuous research on emerging threats and threat actor activity.
Analyze data and prioritize vulnerabilities to prevent and eradicate threats.
Expertise in intelligence, information security, network forensics, or insider threat with a focus on Industrial Control Systems/Supervisory Control and Data Acquisition (ICS/SCADA) systems.
Understand unique components, protocols, and architectures of ICS/SCADA systems.
Extract and enrich information from various data formats.
Articulate requirements and enhancements to development teams for capabilities and tools.
Create general queries, fingerprint, and identify atypical events using XKS.
Create visualizations and dashboards using Elastic/Splunk or other SIEM tools.
Analyze TCP/IP communication protocols, packet flows, and PCAP traffic in Wireshark.
Write signatures in Zeek and/or Snort.
Document findings and create detailed reports.
Present results to technical and non-technical stakeholders.