phia LLC

At phia, we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients.We are currently seeking a Threat Detection Analyst to join us supporting a federal customer’s Risk Based Alerting (RBA) Team. RBA supports the Cybersecurity Operations Center (CSOC) by writing, maintaining, and tuning detection logic across a suite of technologies and security appliances. This Cyber Operations Specialist coordinates with Security Engineers, Splunk administrators, and system owners to integrate the detections, troubleshoot issues, and measure the program’s effectiveness to identify, correlate, and enrich suspicious events in the enterprise. This position is currently remote with an expectation to return to the office either full time or hybrid in the future at the discretion of the customer. The ideal candidate is located within commuting distance of Morrisville, NC or Falls Church, VA What You'll Do<ul> <li>Write, modify, and manage detection logic using Splunk, Tanium, cloud, and network intrusion detection systems (NIDS)</li> <li>Integrate open-source and vendor signatures and rules, such as Sigma, Snort, Splunk Enterprise Security Alerts, Tanium Signals, Yara, etc.</li> <li>Formulate strategic mitigation recommendations and/or plans</li> <li>Collaborate with CSOC analysts and Pen Test team to test and tune detections</li> <li> Assist the CSOC in understanding and responding to alerts generated from RBA detections</li> <li>Collaborate with the threat intelligence team to analyze threat reporting, identify gaps in detection capabilities to address threat actor TTPs, and develop new signatures to address them</li> <li>Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.</li> </ul>RequirementsEducation + Experience<ul> <li>Preferred 7+ years’ experience in a security operations technical role</li> <li>Bachelor's in computer science, cybersecurity, information technology, software engineering, information systems, computer engineering or similar (desired)</li> <li>3+ years experience with Splunk, MITRE ATT&amp;CK Framework, Endpoint Security Services</li> <li> Experience with host level scripting, eg. Powershell.</li> <li>Experience in working with one or more Cloud Platforms</li> <li>Familiarity with cybersecurity operation center functions</li> <li>Linux Administration and monitoring</li> <li>Windows Administration and monitoring</li> <li>Experience with Security framework and can interpret use cases into actionable monitoring solutions.</li> <li>Experience with Security framework and can interpret use cases into actionable monitoring solutions.</li> </ul> Certifications One of the following or willingness to achieve upon hire: <ul> <li>CompTIA Security </li> <li>GIAC: GSEC, GCIH, or GCIA</li> </ul>Desired Knowledge, Skills and Abilities <ul> <li>Knowledge of MITRE ATT&amp;CK framework and applying the techniques to signatures and rules</li> <li>Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.</li> <li>Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).</li> <li>Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).</li> <li>Fundamental understanding of Windows and Linux operating systems.</li> <li>Ability to leverage scripts to automate routine tasks and processes </li> <li>Skill in preserving evidence integrity according to standard operating procedures or national standards.</li> </ul> Security Clearance Requirements <ul><li>Ability to obtain Public Trust (or higher) government clearance. Active USPS Sensitive clearance preferred.</li></ul> Who You Are <ul> <li>A proactive problem solver that appreciates the challenges of working in a fast-paced, dynamic environment.</li> <li>Intellectually curious with a genuine desire to learn and advance your career.</li> <li>An effective communicator, both verbally and in writing.</li> <li>Customer service-oriented and mission-focused.</li> <li>Critical thinker with excellent problem-solving skills.</li> </ul> If your experience and qualifications aren’t a match for this position, you will remain in our database for consideration for future opportunities that may be a better fit.IMPORTANT: This position is subject to Executive Order 14042 and the Safer Federal Workforce Task Force Guidance requiring covered employees to be fully vaccinated against COVID-19. As a condition of employment, the successful candidate will be required to provide proof of full COVID-19 vaccination prior to commencing employment. Prospective or new employees who are unable to be vaccinated due to medical reasons or a sincerely held religious belief may request a reasonable accommodation. This request must be approved prior to the start of employment to the extent a reasonable accommodation is available that does not pose an undue hardship on phia or a direct threat to the candidate or phia’s employees.BenefitsWho We Are phia LLC ("phia") is a Northern Virginia based, 8a certified small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis &amp; Incident Response, Cyber Architecture &amp; Capability Analysis, Cyber Policy &amp; Strategy, and Information Assurance/Security. we proudly support various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities. phia values work-life balance and offers the following benefits to full-time employees: <ul> <li>Comprehensive medical insurance to include dental and vision</li> <li>Short Term &amp; Long-Term Disability</li> <li>401k Retirement Savings Plan with Company Match</li> <li>Tuition and Professional Development Assistance</li> <li>Flex Spending Accounts (FSA)</li> </ul> phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.

Morrisville

Threat Detection Analyst

At phia, we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. We are looking for a Cybersecurity Architect Specialist. This job is located in either Morrisville, NC or Merrifield, VA, with some remote capability during the pandemic at the discretion of the customer. Preferred candidates will live within a commutable distance to these locations. What You'll Do:<ul> <li>Provide security architecture development services.</li> <li>Document the organization’s Cybersecurity architecture for several audiences. </li> <li>Advise on security system infrastructure and contribute system and network engineering knowledge to improve the security architecture.</li> <li>Communicate conceptual architecture and capabilities to management. </li> <li>Guide the design and implementation of secure solutions and services across business and IT support areas, driving the successful configuration and implementation of security solutions to reduce risk to an acceptable level.</li> <li>Assist with designing, developing, and recommending integrated security system solutions that ensure proprietary and confidential data and systems are protected and security standards are met.</li> <li>Work with SMEs to identify, document, and track weak points in the architecture based on standardized methodologies and innovative analysis.</li> <li>Support system- and network-related policy development and regulatory compliance.</li> <li>Monitor for cascading effects and unintended consequences of system change.</li> <li>Work on special projects or investigations into specific technology or solution issues and shepherd research and piloting of new technologies.</li> </ul>RequirementsEducation + Experience<ul> <li>Must be a U.S. Citizen</li> <li>4+ years of security architecture experience </li> <li>4-6+ years of cybersecurity experience </li> <li>Bachelor's or Master's Degree in Computer Science, Information Systems, Cybersecurity or other related field (or equivalent relevant work experience). </li> <li>Experience in Cybersecurity technology solution planning, engineering, and deployment.</li> <li>Ability to work well in a strong collaborative team-oriented environment.</li> <li>Ability to effectively present technical information to many different levels of the organization.</li> <li>Upper-level Experience with Microsoft Office tools: i.e., PowerPoint</li> <li>Experience working in a fast-paced complex system</li> <li>Experience in a very large enterprise environment</li> <li>Experience with Cisco Wireless networking</li> </ul>Certifications<ul><li>One or more of the following: Certified Information Systems Security Professional (CISSP), Cisco Certified Enterprise Infrastructure Certification (CCIE), Cisco Certified Network Professional (CCNP) </li></ul> Security Clearance Requirements <ul><li>Ability to obtain Public Trust (or higher) government clearance. </li></ul> Who You Are <ul> <li>A proactive problem solver that appreciates the challenges of working in a fast-paced, dynamic environment.</li> <li>Intellectually curious with a genuine desire to learn and advance your career.</li> <li>An effective communicator, both verbally and in writing.</li> <li>Customer service-oriented and mission-focused.</li> <li>Critical thinker with excellent problem-solving skills.</li> </ul> If your experience and qualifications aren’t a match for this position, you will remain in our database for consideration for future opportunities that may be a better fit.MPORTANT: This position may be subject to Executive Order 14042 and the Safer Federal Workforce Task Force Guidance requiring covered employees to be fully vaccinated against COVID-19, which the Federal Government is not enforcing at this time.BenefitsWho We Are phia LLC ("phia") is a Northern Virginia based, 8a certified small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis &amp; Incident Response, Cyber Architecture &amp; Capability Analysis, Cyber Policy &amp; Strategy, and Information Assurance/Security. we proudly support various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities. phia values work-life balance and offers the following benefits to full-time employees: <ul> <li>Comprehensive medical insurance to include dental and vision</li> <li>Short Term &amp; Long-Term Disability</li> <li>401k Retirement Savings Plan with Company Match</li> <li>Tuition and Professional Development Assistance</li> <li>Flex Spending Accounts (FSA)</li> </ul> phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.

Cybersecurity Architect Specialist

Apply to Cyber Security Jobs in Morrisville in companies remotely and near you. New Cyber Security Jobs in Morrisville added daily.

Job Position and Company	Location	Tags	Posted
Threat Detection Analyst at phia LLC	Application Security Clearance Comptia Cyber Defense DOD
Cybersecurity Architect Specialist at phia LLC	Cissp Clearance DOD Incident Response Regulatory Compliance

Cyber Security Jobs in Morrisville

0 Cyber Security Jobs in Morrisville. Page 1 of 1

2 closed cyber security jobs in morrisville:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Morrisville

0 Cyber Security Jobs in Morrisville. Page 1 of 1

2 closed cyber security jobs in morrisville:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter