What We Do:
Our team, within the Cyber Risk and Resilience Directorate researches, designs, and develops software tools for the collection, storage, and analysis of network data to provide security insights. We provide both the core network tools to facilitate this capability, and prototypes of new methods to present the data most effectively. We work with data at a scale generally not experienced by most organizations, handling record counts in the tens of billions per day.
Developing security insights at this scale requires creativity, efficiency, and contemporary knowledge of modern computing platforms. In some cases, the computing has outpaced the methods, and it is incumbent upon us to generate novel views of both the entire data collection, and of focused datasets tailored to specific analyst needs.
Our network situational awareness security tools are published here:
Position Summary:
As a network security researcher on the Network Situational Awareness team, you will research network threats to develop methods of detection and tailor these for partner environments. Transition of this research will take the form of developing detection capabilities, providing new requirements and feature requests for our NetSA Security tool suite, writing publications, and providing customer-specific training. The primary network data source for the team is netflow combined with application layer metadata, with an expanding focus on host-based (e.g., EDR) and cloud telemetry.
You will be responsible for gaining insights from data to facilitate detections, working with partners to help them to better understand their data and researching new data sources to expand the expertise of the team.
Requirements:
-Bachelor's Degree in Computer Science or a relevant technical discipline with eight (8) years of relevant work experience; or a MS in Computer Science or a relevant technical discipline with five (5) years of relevant work experience; or a PhD in Computer Science or other relevant technical discipline with two (2) years of relevant work experience.
-Movement between buildings within the SEI and CMU community required.
Willingness to travel to various locations to support the SEI’s overall mission. This may include national travel to sponsor sites, conferences, and offsite meetings on occasion.
-You will be subject to a background check and will need to obtain and maintain a Department of War security clearance.
Knowledge, Skills and Abilities:
Ability to translate threat intelligence to avenues for research, prototyping, and curation of detection capabilities.
Strong knowledge of network fundamentals, common application layer protocols, and network-based telemetry.
Strong proficiency in at least one scripting or programming language such as Python, Go, Ruby, C, Java, or Scala.
Strong problem-solving and analytical skills, detailed research, and ability to document and communicate ideas and findings to diverse audiences.
Desired Experience:
Hands-on experience in a security research, threat hunting, detection engineering, or Cyber threat Intelligence (CTI) analyst role.
Experience analyzing large datasets, especially network telemetry such as netflow, application metadata, or PCAP from network sensors such as YAF, Zeek, Suricata, etc;
Experience applying cybersecurity data science methods and practices
Experience using open-source and / or commercial Internet intelligence telemetry and datasets
Strong grasp of the threat landscape and experience researching and investigating threats
Experience presenting technical topics
Location
Arlington, VA, Pittsburgh, PAJob Function
Software/Applications Development/EngineeringPosition Type
Staff – RegularFull time/Part time
Full timePay Basis
SalaryNetwork Security Researcher • Arlington, VA
Job Title :Senior Security EngineerLocation :Washington, DC (Remote, but need to be within 100 miles of DC)Duration :Contract to HireClient Requirement :US Citizen able to obtain Public Trust Clear... Show more
Reason :Candidate SelectedSenior FIPS 140 Security EngineerColumbia, MD or 100% RemoteYou will get an exciting opportunity to work in the growing IT Security field in support of National defense.Th... Show more
Ark Solutions Inc is looking for Network Engineer!Position :Network EngineerLocation :REMOTEDuration :3Months and possibility of extensionDescription :Day-to-day Responsibilities :Leads assessment,... Show more
Job DescriptionJob DescriptionAt FEI Systems, we create innovative technology solutions to improve the delivery of health and human services because we know when cumbersome administrative processes... Show more
Splunk Cyber Security SME Splunk Cyber Security SME (Remote) USPS is seeking an experienced Splunk Subject Matter Expert with strong Engineering skills to join our dynamic team.The ideal candidate ... Show more
A technology solutions provider is seeking a ServiceNow Architect to lead the design and delivery of enterprise-scale ServiceNow solutions.You will engage with clients, mentor developers, and ensur... Show more
Remote Contract for ACS Migration Network Engineer ContractSonoma Consulting is one of the fastest growing Global IT Consulting and Executive Search providers with offices in Naperville IL; Chicago... Show more
A leading global IT services provider is looking for a Network Architect to enhance enterprise and cloud network infrastructure.This remote position requires expertise in Cisco technologies, Palo A... Show more
Job DescriptionJob DescriptionMacro Pros has an immediate opening for a OT Cybersecurity Engineer to support the security of Operational Technology (OT) environments, including building automation,... Show more
Conducts surveillance in retail, food, and services facilities and/or distribution centers to detect acts of pilferage or other illegal or dishonest acts.Surveys physical working conditions or work... Show more
A global legal firm is seeking an Information Security Engineer to enhance security posture across its IT infrastructure.This position allows for 100% remote work within a firm-approved U.Candidate... Show more
A prominent law firm is seeking an Information Security Engineer in Washington, DC, with the potential for remote work.The candidate will be responsible for supporting security operations, engineer... Show more
AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.Prioritizing innovatio... Show more
Job DescriptionJob DescriptionAbout CoresiteAt CoreSite, we empower a more connected future through high-performance data centers and interconnection solutions.Recognized as a trusted partner in di... Show more
IT services company that specializes in cybersecurity, Big Data/databases, software development, systems testing, STIG Compliance training, closed-circuit television/security cameras and access con... Show more
A technology solutions provider is seeking a Network Engineer to enhance national defense capabilities through innovative digital solutions.This full-time position involves determining user require... Show more
Marathon TS is looking for a Cyber Security Analyst to support the US Dept of State in a Hybrid On-site / Off-site (3 days on site split between Beltville MD 70% of the days, Washington DC 30% of t... Show more
A technology solutions provider is seeking a Mid-Senior level Network Architect to design and engineer scalable networks for high-performance workloads.You will collaborate with software engineers ... Show more
AI data lab for training frontier models and evaluating AI agents.Experts contribute their diverse subject matter knowledge across domains such as finance, healthcare, STEM engineering, and more.AI... Show more
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations.Since 2011, our mission hasn't changed -- we're here to stop breache... Show more
