TS / SCI

cleared Cyber Countermeasure Specialist Honolulu, HI, US

• Posted 5 hours ago

• Updated 5 hours ago Contract W2 On-site USD $56.00 - 81.00 per hour Fitment Dice Job Match Score™ 🔢 Crunching numbers... Job Details Skills PEARL Bridging Analytics SD WAN Collaboration NOC Security Clearance Military Testing Intrusion Detection Snort Sensors Firewall Palo Alto Workflow JIRA Computer Networking TCP/IP Border Gateway Protocol IPsec Dragon NaturallySpeaking DNS TLS Network Packet Analysis Wireshark Tcpdump DoD Certified Ethical Hacker Security+ Management SIPRNet Scripting Python Windows PowerShell Bash Data Flow PEARL Bridging Analytics SD WAN Collaboration NOC Security Clearance Military Testing Intrusion Detection Snort Sensors Firewall Palo Alto Workflow JIRA Computer Networking TCP/IP Border Gateway Protocol IPsec Dragon NaturallySpeaking DNS TLS Network Packet Analysis Wireshark Tcpdump DoD Certified Ethical Hacker Security+ Management SIPRNet Scripting Python Windows PowerShell Bash Data Flow Summary Our client, a leading Government Systems Integrator, is in need of a

TS / SCI

cleared Cyber Countermeasure Specialist for initial 12 month contract onsite in Pearl Harbor, HI. The Cyber Countermeasure Specialist will be working on a defensive cyber operations team. The Cyber Countermeasure Specialist will play a critical role in bridging detection analytics and active threat containment across an associated multi-domain operational enclave. The Cyber Countermeasure Specialist will be responsible for the engineering, operational validation, deployment and lifecycle maintanance of defensive countermeasures, detection signatures, sensor tuning and containment workflows (operating across active operational nodes, including SD-WAN transport fabrics and out-of-band management links), tuning advanced network sensor grids (Corelight and Elastic Defend) and authoring actionable threat containment playbooks within JIRA and collaborate closely with Tier II NOC Engineers and NIWC pipeline architects to neutralize adversarial activity across the customers operational battlespace.

Required Skills:

Must have an active

TS / SCI

clearance. At least 4 years of experience working in Intrusion Detection / prevention Engineering, custom signature creation and / or network defense operations and a Bachelors degree (military experience will suffice if candidates do not have a degree. Prior experience authoring, testing and deploying custom network intrusion signatures and parsing logic (Snort / Suricata rules, Zeek Scripts, YARA and / or Elastic

KQL / EQL

query rules). Hands on operational experience with enterprise sensor platforms such as Corelight, Elastic Defense / ELK Stack or next-gen firewalls, ideally Palo Alto. Experience developing, documenting and executing threat containment workflows and tracking procedures using Atlassian JIRA. Understanding of networking protocols (TCP / IP, BGP, IPsec, DNS, TLS), network perimeter architecture and packet analysis tools, ideally, Wireshark or tcpdump. Must hold a valid certification or degree meeting

DOD 8140.03 / DCWF

Work Role Code 532 Cyber Defense Incident Responder (at the intermediate proficiency level) prior to being onsite. Any of the following certifications, CySA+, GIAC

CGTI, EC-C

CEH, CND, Security+, etc. Preferred or Nice to

Have Skills:

Experience deploying and managing countermeasures across SIPRNet or

TS / SCI

enclaves. Experience with automated containment scripting using Python, PowerShell, Bash or REST APIs. Understanding of Darktrace Managed Detection & Response (MDR) and Prometheus pipeline data flows. ClearBridge Technology Group is an Equal Opportunity Employer. We offer excellent benefits and compensation packages. The expected hourly rate range for this role is $56 - 81 / hr The posted range is an estimate, the actual compensation offer will be based on the candidate's experience, skills, qualifications and will be in line with internal equity. Employers have access to artificial intelligence language tools ("AI") that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id:

10121117

Position Id:

19294 Posted 5 hours ago