Cybersecurity Systems Engineer – Intrusion Detection

Are you ready to grow as a Cybersecurity Systems Engineer – Intrusion Detection? Antero Technology Services is looking for a proactive person with a TS/SCI clearance to join our Cybersecurity Team. We are charged with defending a globally distributed, mission-critical network infrastructure from probing, attacks, and intrusions. As part of our team, you’ll monitor IDS/IPS alerts and continuously tune your systems including Suricata, Palo Alto, ArcSight, and others. You’ll develop process scripting, dashboards, and application health monitoring automation to make your systems robust and reliable across the global enterprise.

Your Place in Our Team

We’re a small business which means you make a big difference with our team. We offer full company-paid health plans, time off, retirement, and other financial benefits. Our culture thrives on learning, and our professional growth program helps pay for your advancement.  We encourage leadership growth too, and we’ll help you build and lead a team of your own.

What you’ll be doing

• Maintain the functionality, efficiency, and sustainment of Cybersecurity Network Defense Infrastructure systems including Palo Alto, ArcSight, Suricata, and others
• Monitor and evaluate signature alerts from Intrusion Detection/Intrusion Prevention Systems (IDS/IPS) for actionable events and suppression of false positives
• Provide "tune-or-drop" recommendations to the Defense Countermeasures Team following the Signature Lifecycle Review procedure
• Develop dashboards, data models, and trending reports to convey cybersecurity posture
• Create programmatic documentation, standard operating procedures, and operational checklists
• Design and customize complex search queries for advance searching, forensics, and analytics
• Work with security engineering team to integrate new capabilities, plan life cycle replacements, and provide input into the security architecture roadmaps

What you’ll need to have

• 8570 IAT Level II Certification (typically Security+)
• Secondary Certification (CEH, CySA+, Cloud+, CND)
• TS/SCI with CI Poly, or willingness and ability to be cleared
• High School+12 years; Bachelor’s+8; Master’s+6
• Experience with network security topologies, devices, and services
• Experience with IDS/IPS operations and optimizations
• Experience developing Splunk dashboards
• Experience configuring rules using regular expressions and scripting languages
• Experience developing and implementing Snort and Suricata signature files
• Experience configuring Palo Alto firewalls

Strengths you’ll bring to our team

• Passion for learning and professional growth
• Eagerness to help customers, peers, and juniors
• Taking ownership to do the right things right
• Building trust by delivering results that make a difference
• Comfortable communicating good news, bad news, challenging opinions, and innovative ideas

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.