AWS Detection Engineer

Overview

We are seeking an AWS Detection Engineer to join our team in support of the GSM-O II effort. This position allows a hybrid schedule, and candidates can work out of Scott AFB, IL; Whitehall, OH; or Hill AFB, UT on their on-site days.

The Cyber Security Analyst / AWS Detection Engineer develops SIEM / SOAR capabilities to support the team's Cyber Security Service Provider (CSSP) services. This will include developing, implementing, testing, and executing detection capabilities for AWS security monitoring using Elastic and Splunk.

A successful candidate will have experience in cyber analysis / incident response and SIEM / SOAR development. Candidates with experience using Elastic and Splunk within AWS environments will be able to apply that knowledge while analyzing and responding to cyber threats and warnings.

Responsibilities

• Work with site threat emulation / analytic development team to maximize detection opportunities referenced to the MITRE ATT&CK framework.
• Develop, implement, and test analytics using Elastic and Splunk to detect malicious actor activity within AWS IaaS environments.
• Review operation and threat reports to determine detection improvement opportunities.
• Provide analyst training opportunities using test environments and emulations of malicious activity.
• Assist / advise other teams within DISA Global on their cloud security missions as needed.

Qualifications

Preferred Qualifications

At Leidos, we don't want someone who "fits the mold"-we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, "what's next?" before the dust settles on "what's now."

If you're already scheming step 20 while everyone else is still debating step 2... good. You'll fit right in.

Pay Range : $85,150.00 - $153,925.00

J-18808-Ljbffr