SITEC - Threat Detection Engineer - MacDill AFB

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Program Overview

Peraton provides USSOCOM, its Component Commands, Theater Special Operations Commands (TSOCs), deployed forces, CIO/J6, and end-users with high-quality IT platform and network services over an eight-year period.

About The Role

Peraton requires Threat Detection Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3. This position is located at MacDill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps) to include performing Defensive Cyber Operations (DCO) services, and supporting the Cybersecurity Service Provider (CSSP) to protect, monitor, analyze, detect, and respond to cyber incidents.

The primary objectives of the Threat protection Engineers are to develop, implement, and drive continuous improvement of threat detection capabilities and engineering solutions throughout the USSOCOM enterprise.

• Collaborate closely with SOCOM Enterprise IT infrastructure teams to ensure comprehensive log collection, improve security monitoring capabilities, identify vulnerabilities, and implement security best practices on Enterprise IT assets.
• Modernize Security Operations through integration of continuous threat intelligence feeds into security tools and workflows to inform security decisions, prioritize threat detection, and accelerate response times to emerging threats.
• Design, develop, and implement advanced threat detection signatures, rules, and alerts across the vast SOCOM cybersecurity technologies and IT infrastructure, including multiple SIEM (Security Information and Event Management) platforms, endpoint detection tools, and network security systems.
• Translate strategic cyber threat intelligence into enterprise-wide detection, response, and automation strategies.
• Explore and implement security technologies and methodologies to modernize security infrastructure and processes.
• Optimize security operations through automation and orchestrations of repetitive or manual tasks to improve consistency and efficiency amongst security teams.
• Identify emerging threats and vulnerabilities relevant to the organization's environment and develop proactive detection strategies to mitigate them.
• Evaluate new threat detection technologies and techniques to innovate SOCOM security process and tools and provide implementation strategies.

Qualifications

Qualifications:

• 8 years with BS/BA, 6 years with MS/MA, 10 Years with AS/AA or 12 years with HS
• A DoD TS/SCI clearance is required
• IAT 2 and CSSP Analyst OR CSSP Incident Responder
• Prior experience in Threat Detection

Desired Qualifications:

• GIAC Certified Incident Handler Certification (GCIH)
• CompTIA Advanced Security Practitioner (CASP+/SecurityX)
• Ability to communicate security issues clearly to both technical and non-technical stakeholders
• Strong understanding of security technologies used to defend Enterprise networks such as EDR, XDR, IDS, IPS, SIEM and SOAR.
• Hands-on experience using SIEM solutions such as Splunk and Microsoft Sentinel to create threat detections.

SCA / Union / Intern Rate or Range

Details

Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO:Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.