GovCIO

1 month ago

Intrusion Detection Team Lead - 1st shift

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Lead intrusion detection and cyber defense activities on the 1st shift (0700–1530) onsite in Washington, DC. Collaborate with intrusion analysts to identify threats, coordinate remediation, and provide timely, actionable sanitized intelligence for incident response. Use technical knowledge of networks and computer systems to assess security posture, analyze intrusion signatures and attacker TTPs, and deliver briefings and intelligence reports to leadership while supporting SIEM-based investigations.

Location: Washington

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Manager level

Key Responsibilities

•Collaborate with intrusion analysts to identify, report on, and coordinate remediation of cyber threats to the client.
•Provide timely, actionable sanitized intelligence to cyber incident response professionals.
•Leverage technical knowledge of computer systems and networks to assess the client’s security posture.
•Conduct intelligence analysis of intrusion signatures and attacker tactics, techniques, and procedures for attack preparation and execution.
•Research hackers, hacker techniques, vulnerabilities, and exploits, and provide detailed briefings and intelligence reports to leadership.

Pay and Benefits

Salary: USD 108,310 - 150,000 annually

Key Requirements

•Bachelor's degree and 8 years of intrusion detection experience.
•7 years of security intrusion detection examination experience with logging data from wide-area network and host traffic, IPS/IDS/ HIPS event review, and server/web log analysis.
•Working experience with Splunk SIEM and the ability to create advanced Splunk queries or advanced Grep skills for log/console event analytics.
•At least two years as a cyber security or security operations shift team leader and at least five years at a senior level performing analytics examinations.
•Must hold at least one of the listed certifications (GCIA, ECSA, GPPA, GCED, SSCP, CISSP) and Splunk Fundamentals I & II certification.

Experience:7+ yearsCybersecurityIntrusion detectionSecurity operationsSIEM

Education:Bachelor's

Skills:Intelligence analysisBriefing stakeholdersCoordinationIncident response support

Certifications:GIAC Certified Intrusion Analyst (GCIA)EC-Council's Certified Security Analyst (ECSA)GIAC Certified Perimeter Protection Analyst (GPPA)GIAC Certified Enterprise Defender (GCED)Systems Security Certified Practitioner (SSCP)Certified Information Systems Security Professional (CISSP)Splunk Fundamentals I & II

Languages:English

Tech Stack:Splunk SIEMGrepSnortIPSIDSHIPSPCAPsSIEMFirewall ACL

Eligibility

Security Clearance:Suitability/Public Trust

Company Brief

GovCIO

Provides IT modernization, cloud, cybersecurity, data analytics, and managed services to U.S. federal civilian and defense agencies, delivering technology solutions and mission support to improve government operations and security.

Industry: Professional Services

Growth: Established Company

Headquarters: Herndon, United States

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

GovCIO

1 month ago

Intrusion Detection Team Lead - 1st shift

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Location: Washington

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Manager level

Key Responsibilities

•Collaborate with intrusion analysts to identify, report on, and coordinate remediation of cyber threats to the client.
•Provide timely, actionable sanitized intelligence to cyber incident response professionals.
•Leverage technical knowledge of computer systems and networks to assess the client’s security posture.
•Conduct intelligence analysis of intrusion signatures and attacker tactics, techniques, and procedures for attack preparation and execution.
•Research hackers, hacker techniques, vulnerabilities, and exploits, and provide detailed briefings and intelligence reports to leadership.

Pay and Benefits

Salary: USD 108,310 - 150,000 annually

Key Requirements

•Bachelor's degree and 8 years of intrusion detection experience.
•7 years of security intrusion detection examination experience with logging data from wide-area network and host traffic, IPS/IDS/ HIPS event review, and server/web log analysis.
•Working experience with Splunk SIEM and the ability to create advanced Splunk queries or advanced Grep skills for log/console event analytics.
•At least two years as a cyber security or security operations shift team leader and at least five years at a senior level performing analytics examinations.
•Must hold at least one of the listed certifications (GCIA, ECSA, GPPA, GCED, SSCP, CISSP) and Splunk Fundamentals I & II certification.

Experience:7+ yearsCybersecurityIntrusion detectionSecurity operationsSIEM

Education:Bachelor's

Skills:Intelligence analysisBriefing stakeholdersCoordinationIncident response support

Languages:English

Tech Stack:Splunk SIEMGrepSnortIPSIDSHIPSPCAPsSIEMFirewall ACL

Eligibility

Security Clearance:Suitability/Public Trust

Company Brief

GovCIO

Industry: Professional Services

Growth: Established Company

Headquarters: Herndon, United States

Website LinkedIn