Threat Management Specialist – Tier 2

🔥 0 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $96.6k - $130.7k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

General Dynamics Information Technology

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1954

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

General Dynamics Information Technology is a company at the forefront of technological innovation, offering a wide range of services including consulting, digital modernization, and application services. The company is heavily involved in implementing solutions related to artificial intelligence, cloud computing, cybersecurity, high-performance computing, and quantum technologies. GDIT is committed to supporting government and defense sectors, providing mission-critical services such as logistics and supply chain management, intelligence, and homeland security. The company also focuses on diverse and inclusive hiring practices and actively promotes employee well-being. Through its digital accelerator solutions and pioneering use of emerging technologies, GDIT aims to propel agencies' missions forward and address complex technological challenges.

📋 Description

• Perform deep-dive incident analysis by correlating data from various sources and determining whether critical systems or datasets are affected • Handle incidents according to playbooks and SOPs • Advise on remediation actions • Provide input and analysis on leveraging AI, machine learning, and SOAR capabilities to improve CSOC efficiency and accuracy • Identify cybersecurity problems requiring mitigating controls • Analyze network traffic to identify exploit- or intrusion-related attempts • Recommend detection mechanisms for exploit- and intrusion-related attempts • Provide subject matter expertise on network-based attacks, network traffic analysis, and intrusion methodologies • Escalate items requiring further investigation to Threat Management team members • Execute operational processes supporting responses to identified security incidents • Use AI/ML-based tools and techniques to detect anomalies, automate incident triage, and improve threat intelligence • Perform and analyze threat intelligence to assess risk and adapt defenses using ML-enhanced tools • Manage email security using Proofpoint, monitor threats, and respond to attacks • Configure Splunk for log analysis, create alerts, and investigate security incidents • Set up FirePower for network monitoring, analyze traffic patterns, and enforce security measures • Deploy SentinelOne agents, monitor alerts, and conduct security assessments • Monitor, review, and respond to security alerts and incidents across Microsoft Defender for Cloud Apps, Defender for Endpoint, Defender XDR, Defender for Office 365, Azure Entra ID, and Google Cloud Security Command Center • Perform threat detection and analysis, investigate suspicious activity, coordinate incident response, and implement remediation actions • Tune security policies and maintain visibility into cloud and endpoint environments • Support continuous improvement of the organization’s security posture • Stay current on cybersecurity trends, threat actors, and AI/ML research • Identify and support automation use cases, including AI/ML use to enhance SOC capabilities • Collaborate across Operations to provide SOC enhancement capabilities through automation and AI

🎯 Requirements

• 3+ years of related experience • BA or BS in Computer Science, Information Technology, or related field, or an additional 4 years of relevant work experience in lieu of a relevant college degree • 3+ years of IT security experience with at least some exposure to AI/ML projects • 2+ years of experience in network traffic analysis • Ability to work Monday–Friday, 11:00 PM–7:30 AM ET • Strong working knowledge of Boolean Logic, TCP/IP fundamentals, network-level exploits, threat management, control frameworks, and risk management techniques • Strong understanding of IDS/IPS technologies, trends, vendors, processes, and methodologies • Strong understanding of IDS/IPS architectures and implementations • Strong understanding of IDS/IPS signatures, content creation, signature characteristics, signature-based analysis, and anomaly-based analysis and detection • Experience with cloud security (AWS, Azure, GCP) • Hands-on experience with cybersecurity automation, such as SOAR platforms • Proficiency using machine learning frameworks to develop, train, and deploy models for anomaly detection, threat intelligence, and behavioral analysis in cybersecurity contexts • Skills in data analysis and feature engineering, including preprocessing and transforming large datasets from logs and network traffic • Familiarity with AI/ML techniques in cybersecurity, including automated threat detection, incident response automation, and predictive analytics • Understanding and experience identifying and implementing automation use cases • Ability to obtain and maintain a Public Trust clearance and pass government background screening, including detailed forms and fingerprinting • U.S. residency for the required period under the USPS security clearance process

🏖️ Benefits

• 401K with company match • Comprehensive health and wellness packages • Internal mobility team dedicated to helping you own your career • Professional growth opportunities including paid education and certifications • Cutting-edge technology you can learn from • Paid vacation and holidays • Medical plan options, some with Health Savings Accounts • Dental plan options • Vision plan • Full flex work weeks where possible • Paid time off plans including vacation, sick, personal, parental, military, bereavement, and jury duty leave • 10 paid holidays per year • Paid Family Leave of up to 160 hours in a rolling 12-month period for eligible employees • Short- and long-term disability benefits • Life insurance • Accidental death and dismemberment insurance • Personal accident insurance • Critical illness insurance • Business travel and accident insurance