Cyber Threat Analyst

Job not on LinkedIn

🔥 0 minutes ago

🌲 North Carolina, Minnesota, +1 more states – Remote

🌲 North Carolina – Remote ❄️ Minnesota – Remote ⚔️ Virginia – Remote

💵 $96.6k - $130.7k / year

⏰ Full Time

🟠 Senior

🔴 Lead

🕵️ Threat Intelligence Specialist

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

General Dynamics Information Technology

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1954

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

General Dynamics Information Technology is a company at the forefront of technological innovation, offering a wide range of services including consulting, digital modernization, and application services. The company is heavily involved in implementing solutions related to artificial intelligence, cloud computing, cybersecurity, high-performance computing, and quantum technologies. GDIT is committed to supporting government and defense sectors, providing mission-critical services such as logistics and supply chain management, intelligence, and homeland security. The company also focuses on diverse and inclusive hiring practices and actively promotes employee well-being. Through its digital accelerator solutions and pioneering use of emerging technologies, GDIT aims to propel agencies' missions forward and address complex technological challenges.

📋 Description

• Build automation/SI integration workflows to improve detection and response • Integrate and optimize security technologies into a cohesive detection architecture • Translate operational security needs into technical specifications and implementations • Execute testing, evaluation, and validation of detections and automation workflows • Analyze telemetry for anomalies, trends, and detection gaps • Recommend and implement detection enhancements • Create and maintain documentation, SOPs, and runbooks • Coordinate with SOC, threat intelligence, and incident response teams • Research and assess emerging security and SI/ML capabilities • Support the USPS CISO Detection & Automation Engineering program • Design, implement, and maintain automated/SI-enabled detection and integration capabilities • Strengthen threat detection and response • Collaborate with operations, intelligence, and incident response stakeholders

🎯 Requirements

• 8+ years of relevant experience • Bachelor’s degree in engineering or another IT/security-related major, or equivalent experience • If lacking a relevant college degree, an additional 4 years of relevant work experience is required • Knowledge of detection engineering and automation/SI • Security platform integration expertise • Requirements analysis skills • Testing and validation experience • Security data analysis experience • Documentation and sustainment experience • Cross-functional coordination experience • Research and evaluation of emerging capabilities • CompTIA Security+ or equivalent baseline certification • One of GCIA, GCIH, or CompTIA CySA+ • Programming/scripting certification or demonstrated proficiency in Python, PowerShell, or similar • Ability to obtain and maintain a Public Trust clearance • Successful completion of a government background screening, detailed forms, and fingerprinting • U.S. residency for the last five years, subject to the stated USPS residency rules • Technical knowledge of SOAR tools including SentinelOne, SentinelOne Hyper automation, Splunk Enterprise Security, and Splunk SOAR • Knowledge of Super Intelligence security, SOC operations, threat intelligence, incident response, network protocols, operating systems, cloud platforms, security architecture, programming/scripting, API integration, detection engineering, security automation, malware analysis, digital forensics, risk assessment, machine learning, and SI for security • Knowledge of NIST SP 800-53, CIS Controls, MITRE ATT&CK, CISA NICE, ISO 27001/27002, FISMA, FedRAMP, OMB Circulars, Federal Cybersecurity Directives, and the Privacy Act

🏖️ Benefits

• Medical plan options, including plans with Health Savings Accounts • Dental plan options • Vision plan • 401(k) plan with pre-tax and post-tax contributions and company match • Full flex work weeks where possible • Vacation, sick, personal, holiday, paid parental, military, bereavement, and jury duty leave • Typically 15 days of paid leave per calendar year • 10 paid holidays per year • Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees • Short- and long-term disability benefits • Life insurance • Accidental death and dismemberment insurance • Personal accident insurance • Critical illness insurance • Business travel and accident insurance • Remote/telecommuting options • Less than 10% travel required