IDS Detection System Data Mining Job in Arlington, Virginia Us
A. IDS Detection System Data Mining, event correlation
Work Description; Intrusion Detection System Data Mining, Event
The employee shall perform advanced data mining; event correlation and quality review of the Tier 1 and Tier 2 analysts and if necessary, validate the Tier 2 analysts' findings. The Contractor shall coordinate with other peer organizations and work with the IDS Security Engineers to improve the team's overall detection/prevention capabilities. The employee shall author and modify IDS/IPS signatures and configurations as well as defining SIM content.
Required Skills:
Must have a Top Secret Clearance.
- Ability to recognize known" and suspicious attack traffic patterns
- Ability to determine/recommend new detection/prevention methods/capabilities *
- Ability to write/modify SIM correlation rules
- Ability to define SIM content
- Ability to Tune IDS/IPS systems
- Ability to Create/modify IDS/IPS signatures
- Superb Customer Service Skills
Typically the ideal candidate will have a min. of 6 years with a Bachelor's Degree or 9 years in lieu of degree.
Desired Skills
- Demonstrated understanding and in-depth knowledge of regular expressions
- Demonstrated understanding and in-depth knowledge of scripting languages (perl, python, javascript, etc.)