Threat Management Specialist (Tier 1)

Type of Requisition:

Pipeline

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

MBI (T2)

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Cyber Defense, Cyber Threat Intelligence, Security Information and Event Management (SIEM)

Certifications:

None

Experience:

1 + years of related experience

US Citizenship Required:

No

Job Description:

Advance your career while impacting our national security as a Threat Management Specialist (Tier 1). Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

MEANINGFUL WORK AND PERSONAL IMPACT

This position will support the United States Postal Service (USPS). GDIT is seeking a Threat Management Specialist (Tier 1). The Tier 1 Analysts receives all of the alerts from various sources, including SIEM, CSOC mailboxes, and phone calls directly from the central SIEM and handle as defined in Playbooks and SOPs. Tier 1 Analyst will escalate the events to Tier 2 after initial triage, along with providing input and analysis on how to leverage Artificial Intelligence, Machine Learning, and SOAR capabilities to improve CSOC efficiency and accuracy.

Key Responsibilities:

• Identification of security problems which may require mitigating controls
• Interpret output from the SIEM, CSOC mailboxes, and phone calls to identify potential security incidents
• Collect basic information to support analysis such as IP address, location, affected asset(s), etc.
• Escalate items which require further investigation to other members of the Threat Management team
• Execute operational processes in support of response efforts to identified security incidents
• Utilize AI/ML-based tools and techniques to detect anomalies, automate incident triage, and improve threat intelligence
• Performing and analyzing threat intelligence to assess risk and adapt defenses using ML enhance tools
• Stay current on the latest cybersecurity trends, threat actors, and AI/ML research relevant to the field
• Identify and support automation use cases, including the use of AI/ML to enhance SOC capabilities
• Collaborate across Operations to provide SOC enhancement capabilities through the use of automation and AI

WHAT YOU’LL NEED TO SUCCEED

Education:

• BA or BS in Computer Science, Information Technology or related field
• NOTE: If resources do not have a relevant college degree, an additional 4 years of relevant work experience is required
• One or more relevant certifications such as CEH, CISSP, CompTIA Security+, or GCIH are advantageous

Required Skills:

• 1+ years’ experience in IT Operations
• 1+ year experience in IT Security
• Working knowledge of:
  • Platform Security Basics
  • Threat Lifecycle Management
  • TCP / IP
  • Incident Management
• Knowledge of Control Frameworks and Risk Management techniques
• Excellent oral and written communication skills
• Excellent interpersonal and organizational skills
• Familiarity with the application of AI/ML techniques in cybersecurity, including but not limited to automated threat detection, incident response automation, and predictive analytics. Experience in evaluating the effectiveness of AI/ML solutions in a SOC environment is a plus.
• Understanding of ethical AI principles and their implications in cybersecurity.
• Familiarity with cloud security (AWS, Azure, GCP)
• Understanding and experience identifying and implementing automation use cases.

Security Clearance Level:

• This role will require you to obtain and maintain a Public Trust and will require you to provide onsite fingerprinting at a designated facility.  This investigation may review personal and criminal behavior, financial conduct, foreign influence, as well as other adjudications.
• This position has a U.S. residency requirement. The USPS security clearance process requires the selected candidate to have resided in the U.S. (including U.S. Territories) for the last five years as follows: U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 6 months consecutively in the last 3 years (unless they meet certain exceptions). Non-U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 90 days consecutively in the last 3 years.