Leidos is seeking a Cyber Network Defense (CND) Lancope SME (Subject Matter Expert) to perform technical work as part of an integrated team of CND SMEs supporting the DoD's JRSS (Joint Regional Security Stack) deployment activities. JRSS is a multi-year, global effort to improve the DoD's security posture and provide enhanced security capabilities and analytics by centralizing and virtualizing network security into regional stacks rather than locally distributed appliances. This position is responsible for providing configuration, implementation, configuration and ongoing performance enhancement work for Lancope Stealthwatch appliances installed in the JRSS environment.
Candidate will work as part of a multi-disciplinary team that supports the active and passive Computer Network Defense (CND) tools deployed in stacks. Must be able to integrate with other technical teams, with DISA personnel, with vendor technical support personnel, and with technical representatives from DoD services, working as part of an integrated, cross-platform team that provides CND capability, and military base/post/camp/station migration support services DoD-wide as the JRSS stacks are deployed and used.
The candidate will support Lancope tools deployed in stacks and will assist with initial configuration, troubleshooting, support and project management. Candidate should have extensive CND architectural design experience as well as significant hands-on experience with Lancope.
The successful candidate will be able to do the following Lancope tasks:
- Control RBAC services for deployed systems and services
- Assist lab staff in the build, integration and test of new systems, working either with local or remote teams
- Engineer, design, test and deploy Lancope anomaly-based sensors and management platforms as part of the CND tool suite in the JRSS stacks
- Install and configure the tool (including any work that needs to be done on the underlying OS)
- Integrate the tool for RBAC services such as AD, LDAP, TACACS+
- Configure the tool to work with system health monitoring tools via SNMP for status
- Monitor the tool's health and performance
- Tune system parameters to enhance/improve system performance
- Provide Tier 2/3 troubleshooting for Lancope issues, either within the tool or as part of an integrated team of CND professionals, addressing larger issues as required
- Assist other JRSS CND teams that perform lifecycle O&M on the tools by acting as tool expert
- Configure, troubleshoot, and monitor Lancope event flows including the integration of Lancope data into a SIEM for use by cyber intrusion analysts
- Provide "on the job training" to less experienced JRSS, DISA or DoD Services' team members
- Develop documentation (installation guides, O&M material, etc.)
- Monitor, performance test, and troubleshoot production systems at the SME level
- Act as the senior subject matter expert on the tool for interactions with other teams
- Bachelor's degree from an accredited college in a related discipline, or equivalent experience/combined education, with 12 or more years' experience; or 10 years' experience with a related Master's degree or equivalent work experience.
- To be a successful fit to this assignment, you should be well versed in TCP/IP communications.
- Have a general knowledge of router and firewall functionality on a network.
- Lancope experience is required.
- Familiar with the MS Office tool suite.
- Excellent written and oral communications skills and be able to appropriately present highly technical material to both technical and non-technical audiences
- Per contract requirements, U.S. citizenship and an active DoD Secret clearance is required. In addition, you must be able to successfully obtain up to Top Secret based on requirements from the customer and program.
- DoD 8570 IAT2 certification is required
- Prior experience as a network intrusion analyst or Security Operations Center analyst.
- Experience configuring and maintaining the tool in a multi-tenant environment
- Experience with one or more of the other CND tools in the JRSS cyber suite:
- Tipping Point
- ELK tools
External Referral Eligible