Peraton is currently seeking a Cyber Monitoring Signature Analyst Developer to become part of Peraton’s Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program. The successful candidate will work with cutting edge cyber monitoring tools to build and enhance the organization's threat detection and response capabilities. This position is with the Cyber Incident Response Team. 

Location: Beltsville, MD.  Required: on-site work for the first 90 days. After the 90-day period, a hybrid schedule may be offered. This position will support Monday – Friday / 8:00am to 5:00pm.

In this role, you will: 

• Implement cyber monitoring capabilities within our SIEM and detection tools. 
• Develop and enhance threat dashboards and advanced analysis capabilities.
• Provide tuning of threat detection tools.
• Onboard and integrate cyber monitoring tools from the analyst’s perspective.
• Coordinate with engineers to assist in building and maintaining platforms.
• Coordinate with cyber threat experts to implement the latest signatures.
• Maintain Splunk dashboards and reports.
• Write Zeek (Bro), Suricata and Snort signatures. 
• Use Python and JavaScript to enhance integration of our tools. 
• Develop cloud threat detection capabilities on leading platforms like Microsoft Azure/MDE. 
• Use Machine Learning and User and Entity Behavior Analytics to enhance threat detection.
• Ensure monitoring systems meet relevant standards and regulatory requirements.
• Create and maintain systems that detect, analyze, and respond to cybersecurity threats in real-time.

Basic Qualifications: 

• Bachelor's degree with 2 years experience; or a Masters degree. An additional 4 years of experience can be substituted in lieu of the degree requirement.
• US Citizenship is required
• Ability to obtain an interim Secret clearance before start date
• Must be able to obtain a  final Top Secret security clearance
• Must possess one of the following certifications or the ability to obtain before start date: 
  • CCNA-Security
    CND
    CySA+
    GICSP
    GSEC
    Security+ CE
    SSCP
• Excellent written and verbal communication skills 

Preferred:  

• Understanding of Cloud Development with Microsoft Azure/MDE 
• Familiarity with monitoring Cross Domain Solutions
• Familiarity with Splunk and Databricks 
• Experience with Machine Learning and User and Entity Behavior Analytics 
• Experience with SOAR  (Security Orchestration,  Automation and Response) platform integration.