5-7 years of experience in cybersecurity roles with a focus on real-time threat prevention and response.
Proficiency in offensive or defensive cyber operations, including penetration testing or incident response.
Strong scripting skills in languages like Python, PowerShell, or Bash for automation tasks.
Experience with SIEM tools such as Splunk or QRadar for security monitoring.
Familiarity with AWS cloud services, particularly CloudTrail and CloudWatch for logging.
Knowledge of network protocols and experience with packet capture and netflow analysis.
Experience with security event log analysis and compliance with security standards.
Responsibilities
Support the enhancement of cybersecurity posture for systems and applications.
Analyze cybersecurity data and report findings to stakeholders for informed decision-making.
Conduct assessments and develop mitigation strategies for identified security risks.
Ensure compliance with security controls and continuous monitoring requirements.
Review and author System Security Plans and related documentation for security approvals.
Utilize data visualization tools to create dashboards for system monitoring.
Collaborate effectively within a team and independently in a fast-paced environment.
Benefits
Opportunities for professional development and certifications.
Flexible work environment with potential for remote work.
Supportive team culture focused on collaboration and innovation.
Access to cutting-edge cybersecurity tools and technologies.
Potential for travel within the area for project needs.
Full Job Description
Job Description
We are looking for an experienced Cyber Security Analyst to join our technology-based program.
The team requires support with improving the overall cybersecurity posture of systems and applications. This includes support related to security, accreditation, cyber defense, cyber assurance, cyber assessment, and cyber engineering. Additionally, support is required for analyzing cybersecurity data and reporting outcomes to stakeholders in support of decisions on mitigations, remediation, and enhancements.
Required Skills
Demonstrated experience (significant and current) on real-time prevention, detection, and remediation of cyberattacks on internet-facing systems.
Demonstrated experience in either offensive (e.g., penetration testing, red teaming, ethical hacking) or defensive (e.g., security operations, incident response, threat hunting) cyber operations.
Demonstrated experience (proficiency) in scripting languages (e.g., Python, PowerShell, Bash) for automation and analysis.
Demonstrated experience with security information and event management (SIEM) systems (e.g., Splunk, QRadar, Elastic Stack)
Demonstrated experience with AWS cloud logging such as CloudTrail and CloudWatch.
Demonstrated experience with network protocols, packet capture analysis, and netflow analysis.
Demonstrated experience with security event log analysis, including Windows event logging and Syslog.
Demonstrated understanding of network protocols, operating systems (Windows, Linux), and cloud environments (AWS, Azure, GCP).
Demonstrated experience with various attack vectors, exploitation techniques, and defensive countermeasures.
Demonstrated experience with Authority and Accreditation (A&A) packages needed to obtain security approvals for system deployments into production state.
Demonstrated experience reviewing assessment reports and assist projects in identifying security risks, including technical and non-technical, and developing effective mitigation strategies, including Plan of Action and Milestones (POA&Ms).
Demonstrated experience assuring system components and software applications adhere to continuous monitoring and compliance with Security accesses and controls.
Demonstrated experience reviewing and authoring System Security Plans (SSP), security requirements, and other supporting documentation for the A&A process.
Demonstrated experience writing and reviewing NIST 800-53 controls.
Demonstrated experience running and interpreting Rapid7 scans.
Demonstrated experience working with Amazon Cloud security.
Demonstrated experience with data visualizations tools (e.g. Tableau) to support development of visual dashboards to assist stakeholders with overwatch/monitoring of systems.
Demonstrated experience working effectively independently and as part of a team in a fast-paced environment.
Desired Skills
Demonstrated experience with knowledge of information security standards such as ISO 27001 and NIST.
Demonstrated experience with the ability to design, implement and maintain IDS/IPS technologies (Intrusion Detection System/Intrusion Prevention System).
Demonstrated experience with common offensive security tools and methodologies (e.g., Metasploit, Nmap, Burp Suite, Cobalt Strike).
Demonstrated experience processing software applications through the Sponsor's approving channels to operate within the Sponsor's Cloud offerings.
Demonstrated experience working in a Customer-facing environment.
Demonstrated experience with Sponsor security policies and guidelines.
Demonstrated exceptional analytical and problem-solving skills with the ability to dissect complex technical issues and propose effective solutions.
Demonstrated experience working in the Sponsor's secure cloud computing environment.
