The Cyber/Indications and Warnings Analyst is responsible for performing Security Incident and Event Handling for a critical DoD operational system. The successful candidate will demonstrate strong skills in Incident Response and Handling, Forensic Analysis, and the ability to quickly relay critical information to team members and management clearly, completely, and concisely.
Primary Roles and Responsibilities
As the Attack, Sensing, Warning, and Response (ASWR) analyst, the successful candidate will analyze collected data and derive facts, inferences, and projections to determine if the systems being monitored are operating normally or being attacked by an adversary. This individual will also analyze this collected data to detect an Insider Threat. The successful candidate will develop new dashboards and analytics to refine existing reports and create new reports. He/she will also work with System Engineers and System Administrators to better define the audit data being collected to eliminate false positives and false negatives from the data.
Requirements
Basic Qualifications
• A Bachelor's Degree in Information Assurance or related field.
• At least 3 years of experience with an Indications and Warnings monitoring tool.
• Experience with one or more of the following: StealthWatch, TripWire, Zenoss, and ArcSight .
• Experience tuning audit data to reduce number of false positives and false negatives.
• Experience in responding to detected security incidents.
• Must possess excellent troubleshooting skills.
• Must have a solid understanding of network intrusion detection methods and techniques.
Preferred Qualifications
• Network Security Operations Center (SOC) experience preferred.
• Experience creating Dashboards and Analytics within SEIM (Security Information and Event Management) Tool.
• Experience creating workflows for Incident Response within a SEIM (Security Information and Event Management) Tool.
• Experience with the following: StealthWatch, TripWire, Zenoss, and ArcSight.
• CISSP Certification.
• GIAC Certified Incident Handler Certification.
• GIAC Cyber Threat Intelligence Certification.
Benefits:
- Employee Impact Program. Every employee has the opportunity to define and get rewarded for their contributions they can make toward the long-term health of the company, customer, and employee. This program in combination with our comprehensive time off and leave programs allow you to design a career and compensation program that enables near infinite flexibility while ensuring both company, customer, and individual health and prosperity.
- Comprehensive time off and leave programs:
- 31 Days (248 hours) of Paid Personal Time Off (PTO) for any vacation, holidays, illnesses, and birthdays
- Parental Leave: 40 Hours
- Bereavement Leave: 24 hours.
- Military Reserve Leave (up to 80 hours, see employee handbook for details).
- Jury Duty Leave 16 hours.
- Retirement: Unlimited 401K match up to 8% of your salary up to the federal maximum
- Health Insurance (Medical, Dental, Vision): Premium is 100% company paid (contact us for specific plan details).
- Health Savings Account (HSA): Interclypse contributes $750 for individuals and $1500 for families
- Vision Insurance
- Dental Insurance includes orthodontics coverage
- Life Insurance
- Accidental Death and Dismemberment Insurance
- Disability: Short-term and long-term disability coverage
- Educational support: reimbursement up to the federal max of $5,250
- Company apparel: $200 for company apparel each year
- Social events: Holiday Party, Spring Picnic, Fall Picnic, happy hours and more
The base salary range provided is not adjusted for geographic differences associated with where the work is being performed. Actual salaries will vary depending on factors including but not limited to location, candidate's experience and education/training, internal peer equity, and market and business consideration.
