🛠 Tech Stack

💼 About This Role

You'll join ARSIEM to support a government cybersecurity initiative, working with a small team to create parsers for network protocols and develop fingerprints and signatures to identify suspicious activity. You'll deploy solutions to automate data and metadata analysis for a client at Fort Meade, MD.

🎯 What You'll Do

• Collaborate with customers to overlay network datasets using the ABYSS product.
• Integrate parsers and signatures into ABYSS and develop tradecraft for sensors.
• Develop parsing and processing of network protocols for data repositories.
• Prototype analytic workflows to automate network traffic profiling and alerting.

📋 Requirements

• Bachelor's degree in Computer Science and 8+ years of relevant experience.
• Proficiency with Python, C++, and Spark.
• Experience with Jupyter Notebooks, JIRA, Confluence, and Git/Gitlab.
• Understanding of ASDF and TCLD, and knowledge of XKEYSCORE/ABYSS fingerprints.

✨ Nice to Have

• Knowledge of customer corporate tools and data repositories.
• General understanding of SNORT signatures.
• Familiarity with SCADA/industrial systems and related protocols.

🚩 Heads Up

• Title includes '318' which is extraneous.
• Requires specific customer tools knowledge not publicly available.