Threat Detection Specialist (Cloud)

TCI has an immediate need for a Threat Detection Specialist (Cloud) in Morrisville, NC. This is not a Corp2Corp opportunity. This is a long-term contract opportunity. In addition to competitive, market-rate based pay, TCI provides all our Consultants with Comprehensive Medical/Dental Insurance, 401k, Life Insurance and Long-Term Disability benefits.
THIS POSITION REQUIRES A PUBLIC TRUST SECURITY CLEARANCE PRIOR TO START.
1^st Shift hours (7AM-4PM).  SEEKING LOCAL CANDIDATES ONLY; NO REMOTE
SUMMARY
The 1st Shift Threat Detection Specialist will analyze network traffic to identify exploit or intrusion related attempts.
RESPONSIBILITIES

• Identification of Cybersecurity problems which may require mitigating controls in a CLOUD environment - Azure and GCP focus.
• Analyze network traffic to identify exploit or intrusion related attempts.
• Recommend detection mechanisms for exploit and or intrusion related attempts.
• Provide subject matter expertise on network-based attacks, network traffic analysis, and intrusion methodologies.
• Escalate items which require further investigation to other members of the Threat Management team.
• Execute operational processes in support of response efforts to identified security incidents.

REQUIREMENTS

• 3+ years of IT security experience.
• Exposure to GCP concepts.
• 2+ years of experience in network traffic analysis.
• Strong working knowledge of: Boolean Logic; TCP/IP Fundamentals; Network Level Exploits; Threat Management; and Regular Expressions.
• Knowledge of Control Frameworks and Risk Management techniques.
• Excellent oral and written communication skills; Excellent interpersonal and organizational skills.
• Strong understanding of IDS/IPS technologies, trends, vendors, processes and methodologies.
• Strong understanding of common IDS/IPS architectures and implementations.
• Strong understanding of IDS/IPS signatures, content creation and signature characteristics including both signature and anomaly-based analysis and detection.
• Must be able to obtain a Public Trust Security Clearance prior to start.