3+ years of experience in compliance analysis or information security.
Strong understanding of federal security frameworks like NIST and ISO 27001.
Experience with governance, risk, and compliance (GRC) tools.
Familiarity with security technologies such as SIEM and vulnerability management.
Strong analytical and problem-solving skills with attention to detail.
Excellent written and verbal communication skills.
Ability to work independently and collaboratively with teams.
Responsibilities
Continuously monitor networks and systems for security breaches using various tools.
Analyze security alerts and log data to identify potential threats.
Assist in responding to security incidents by investigating and documenting findings.
Conduct regular vulnerability assessments and report on risks.
Participate in internal and external security audits for compliance assessment.
Generate reports on security incidents and key metrics for management.
Review and recommend adjustments to access controls for appropriate user access.
Ensure adherence to security policies and provide input for updates.
Collaborate with IT teams to resolve security issues and manage patches.
Stay informed about emerging security threats and share intelligence with the team.
Benefits
Opportunity to work in a critical sector supporting the judiciary.
Engagement with cutting-edge security technologies and frameworks.
Collaborative work environment with cross-functional teams.
Potential for professional development and certifications.
Involvement in shaping security policies and procedures.
Full Job Description
Job Description
Job Description
We are seeking a skilled Cyber Threat Analyst to support the judiciary's Technology Security Operations (TSO). The selected candidate will be responsible for planning, developing, and implementing enterprise information security solutions that address both current and emerging security challenges. This role requires expertise in enterprise-scale security problem-solving, security product analysis, and risk management.
Job Responsibilities
Security Monitoring: Continuously monitor networks, systems, and applications for signs of security breaches using security tools (e.g., SIEM, IDS/IPS, firewalls, EDR, etc).
Threat Detection: Analyze security alerts, log data, and network traffic to identify potential threats or vulnerabilities.
Incident Response: Assist in responding to security incidents by investigating alerts, containing threats, and documenting findings.
Vulnerability Management: Conduct regular vulnerability assessments and report on the risks and weaknesses in systems and applications.
Security Audits: Participate in internal and external security audits to assess compliance with security policies and industry regulations.
Security Reporting: Generate reports on security incidents, vulnerabilities, and key security metrics to share with the security team and management.
Access Control Review: Review and recommend adjustments to access controls to ensure users have appropriate access to systems and data.
Policy and Procedure Adherence: Ensure adherence to organizational security policies and procedures, providing input for updates and improvements when necessary.
Collaboration with IT Teams: Work closely with IT and development teams to identify and resolve security issues, including patch management and secure configuration.
Threat Intelligence: Stay informed about emerging security threats and vulnerabilities and share relevant threat intelligence with the security team.
Qualifications
Required Skills/Qualifications
3+ years of experience in compliance analysis, information security, or related fields.
Strong understanding of federal security frameworks (e.g., NIST, FedRAMP, FISMA, ISO 27001, CIS controls).
Experience in governance, risk, and compliance (GRC) tools and methodologies.
Familiarity with security technologies such as SIEM, endpoint protection, access control, and vulnerability management.
Strong analytical and problem-solving skills with attention to detail.
Excellent written and verbal communication skills, with the ability to create policy documentation and reports.
Ability to work independently and collaboratively with cross-functional teams.
Preferred Experience • Certifications such as CISSP, CISM, CEH, Security+, or GIAC. • Experience with cloud security and compliance (AWS, Azure, or Google Cloud). • Familiarity with federal judiciary security policies and risk management frameworks.
Education
Bachelor's degree in information security, Computer Science, risk management, or a related field.
Years of experience can be considered in lieu of degree
