Creates cyber-intelligence tools / methods and performs research and analysis in order to mitigate and eliminate data and cyber security risks. Designs and develops acceptance criteria for cybersecurity architecture.
- Understanding of network protocols, operating systems (Windows, Linux), and security tools like SIEM (Security Information and Event Management).
- Ability to review complex data logs and trace the "blast radius" of a security threat.
- Quick troubleshooting when a breach or system failure occurs.
- Explaining technical risks and security guidelines clearly to non-technical staff and management.
- Involved in the periodic conduct of a review of each system's audits and monitors corrective actions until all actions are closed.
- Responsible for running vulnerability scans, analyzing/validating security vulnerabilities, prioritizing risks (per BOD guidance), coordinate remediation with Infrastructure and Application Teams, verify remediation/closure, document false positives/manage risk acceptances, coordinate vulnerability reporting.
- Monitor network traffic, system/audit logs, and security alerts for suspicious activity.
- Investigate suspected and confirmed security breaches, find the root cause, and stop active attacks.
- Support threat analysis, and digital forensic activities.
- Support latest cyber initiatives/requirements related to audit logging requirements, zero trust architecture, encryption, etc.
- Document security events, write incident reports, and recommend upgrades to management.
- Create security standards and best practices for employees.
Minimum Qualifications- Bachelor's Degree in Computer Science or a related field or equivalent experience.
- 5-10 years of experience in systems security.
- Security Certifications: Security+, CEH, CISSP, other application vendor certs
Other Job Specific Skills- Scripting skills to integrate with security tools/dashboard governance and policy processes and documentation, Knowledge of Federal Cyber Security policy/guidance including OMB, Executive Orders, and NIST 800 Series.
- Need to be familiar with Security Center Nessus scanners.
- Excellent attention to detail.
- Must be able to balance multiple tasks simultaneously.
- Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection, and incident response and remediation.
Compensation RangesCompensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.
