Apply on Employer Site

CGI · 23 hours ago

Network Event Sensor (NES) Tools Engineer (Corelight/Extrahop) - U.S. Citizenship Required

Fairfax, VA

Full-time

Hybrid

Entry, Mid Level

$128K/yr - $276K/yr

2+ years exp

CGI Federal is offering an opportunity for a Network Detection and Response (NDR) Tools Engineer on the CDM DEFEND program. The role involves deploying and managing NDR capabilities to enhance the network security posture of government agencies, requiring close collaboration with agency teams and the configuration of security tools in a cloud environment.

AnalyticsApplication Performance ManagementBusiness IntelligenceConsultingCyber SecurityFinanceInformation TechnologyTechnical Support

No H1B

Security Clearance Required

U.S. Citizen Only

Hiring Manager

Melanie C.

Responsibilities

Deploy, configure, and maintain NDR tools, including ExtraHop and Corelight, in a secure cloud environment

Collaborate with service delivery teams to tailor tool configurations for tenant agencies

Work with cross-functional teams—including network engineers, security analysts, and developers—to integrate security solutions into the overall IT infrastructure

Identify configuration items for network sensors and protect network resources using commercial NDR tools

Provide network engineering support for NDR tool integration with other applications, including Okta for access management

Diagnose and resolve complex technical issues related to network security using tools such as Wireshark and TCPDump

Use applications like Terraform to automate the deployment of security policies to sub-tenants from a master tenant

Create and maintain comprehensive documentation for various audiences (Engineers, Operations, Agencies), covering deployment, configuration, operations, and user guides

Engage with NDR tool vendors for upgrades, support, product updates, and facilitate periodic Technical Exchange Meetings (TEMs)

Support incident response activities and implement monitoring solutions to detect and respond to potential security threats

Integrate alerts from NDR tools into an Elastic dashboard

Configure and log data from NDR tools into selected Security Data Lakes and/or Security Information and Event Management (SIEM) tools

Qualification

CorelightExtraHopNDR toolsTerraformWiresharkTCPDumpSecurity certificationsAgile processesITIL knowledgeCollaborationCustomer focus

Required

Due to the nature of the contract requirements, U.S. citizenship and successful completion of the CGI background check are required prior to beginning work. In addition, candidates must be able to obtain and maintain a DHS EOD/Public Trust clearance

Bachelor's degree and a minimum of 2 years of experience as a Network or System Administrator, including deploying, configuring, integrating, and supporting NDR systems

Understanding of NDR concepts, with hands-on experience deploying, configuring, and implementing NDR tools such as Corelight and ExtraHop

Ability to work collaboratively with team members and cross-functional groups, manage competing priorities, and maintain a strong customer focus