Threat Management Specialist, Tier 2

General Dynamics Information Technology

. Perform deep-dive incident analysis by correlating data from multiple sources .

Posted 10/5/2026full-timeRemote • Virginia • United StatesSeniorLead💰 $96,569 - $130,651 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity incident response, leveraging AI and machine learning for threat detection and analysis. Proficient in network traffic analysis, security automation, and maintaining cloud security across multiple platforms.

Highest-signal resume keywords

Incident Response ManagementNetwork Traffic AnalysisAI/ML Application in CybersecurityCloud Security ExpertiseCybersecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident AnalysisThreat Intelligence AnalysisData AnalysisFeature EngineeringBoolean LogicTCP/IP FundamentalsIDS/IPS TechnologiesCybersecurity AutomationMachine Learning FrameworksNetwork-Level Exploits

Tools & Technologies

SplunkProofpointFirePowerSentinelOneMicrosoft DefenderAzure Entra IDGoogle Cloud SCCSOAR PlatformsAI/ML ToolsCloud Security (AWS, Azure, GCP)

Certifications & Qualifications

GCEDGSECCISSPSSCP

Industry Keywords

CybersecurityIncident ResponseThreat ManagementControl FrameworksRisk ManagementSecurity PostureAutomation Use CasesSecurity PoliciesContinuous ImprovementCybersecurity Trends

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformSplunkTCP/IP

About the role

Key responsibilities & impact

Perform deep-dive incident analysis by correlating data from multiple sources
Determine whether critical systems or data sets are affected
Handle incidents according to playbooks and standard operating procedures
Advise on remediation actions
Provide analysis on leveraging AI, machine learning, and SOAR to improve CSOC efficiency and accuracy
Identify cybersecurity problems requiring mitigating controls
Analyze network traffic for exploit- or intrusion-related attempts
Recommend detection mechanisms
Provide subject matter expertise on network attacks, traffic analysis, and intrusion methodologies
Escalate items requiring further investigation
Execute operational processes supporting security incident response
Use AI/ML tools to detect anomalies, automate incident triage, and improve threat intelligence
Perform threat intelligence analysis to assess risk and adapt defenses
Manage email security with Proofpoint and respond to attacks
Configure Splunk for log analysis, create alerts, and investigate incidents
Configure FirePower for network monitoring and enforce security measures
Deploy SentinelOne agents, monitor alerts, and conduct security assessments
Monitor and respond to alerts and incidents across Microsoft Defender, Azure Entra ID, and Google Cloud SCC
Investigate suspicious activity, coordinate incident response, and implement remediation
Tune security policies and maintain cloud and endpoint visibility
Support continuous improvement of the security posture
Track cybersecurity trends, threat actors, and relevant AI/ML research
Identify automation use cases and collaborate across Operations to enhance SOC capabilities

Requirements

What you’ll need

BA or BS in Computer Science, Information Technology or related field
If no relevant college degree, an additional 4 years of relevant work experience is required
8+ years of relevant experience
3+ years of IT security experience, including some exposure to AI/ML projects
2+ years of experience in network traffic analysis
Ability to work Monday–Friday, 11:00 PM–7:30 AM ET
Strong working knowledge of Boolean Logic, TCP/IP fundamentals, network-level exploits, threat management, control frameworks and risk management techniques
Strong understanding of IDS/IPS technologies, architectures, implementations, signatures, content creation, and signature/anomaly-based analysis
Experience with cloud security across AWS, Azure, and GCP
Hands-on experience with cybersecurity automation, such as SOAR platforms
Proficiency using machine learning frameworks to develop, train, and deploy cybersecurity models
Skills in data analysis and feature engineering using large datasets such as logs and network traffic
Familiarity with AI/ML applications in cybersecurity and evaluating AI/ML solutions in a SOC environment
Understanding and experience identifying and implementing automation use cases
Ability to obtain and maintain a Public Trust clearance and pass government background screening, including fingerprinting
U.S. residency for the last 5 years, subject to the stated USPS residency requirements
Relevant certifications such as GCED, GSEC, CISSP, or SSCP desired

Benefits

Comp & perks

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from
Paid vacation and holidays
Medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan options
Paid sick and personal time
Paid parental, military, bereavement and jury duty leave
Up to 160 hours of paid family leave in a rolling 12 month period for eligible employees
Short- and long-term disability benefits
Life insurance
Accidental death and dismemberment insurance
Personal accident insurance
Critical illness insurance
Business travel and accident insurance
Full flex work weeks where possible
Remote work / telecommuting