Minimum Qualifications:
The Intermediate Cybersecurity Blue Team Analyst independently conducts cybersecurity assessments and defensive cyber operations across diverse enterprise IT environments. The analyst evaluates security controls, system configurations, architecture, vulnerabilities, security events, and operational practices to identify weaknesses and recommend risk-based improvements.
Responsibilities:
• Independently conduct comprehensive cybersecurity assessments of enterprise systems, networks, applications, cloud environments, and supporting infrastructure.
• Assess security controls and technical configurations across Windows and Linux servers, endpoints, network devices, firewalls, VPNs, virtualization platforms, cloud services, databases, web applications, identity systems, and enterprise management platforms.
• Perform vulnerability assessment, configuration assessment, security-control validation, and remediation verification.
• Analyze attack paths and potential impacts associated with identified vulnerabilities and misconfigurations.
• Correlate security events and findings across multiple IT platforms to identify systemic risks and emerging threats.
• Evaluate security architectures and implementations against applicable security requirements and enterprise security standards.
• Develop technically rigorous assessment reports documenting findings, risk, affected assets, evidence, and recommended remediation.
• Brief technical and government stakeholders on assessment results, cybersecurity risks, and remediation priorities.
• Assist in developing assessment methodologies, automated security checks, detection logic, and repeatable assessment procedures.
• Mentor junior analysts and review assessment products for technical accuracy and completeness.
• Maintain awareness of emerging vulnerabilities, adversary tactics, techniques, and procedures (TTPs).
Required Qualifications:
• 3-7 years of experience in cybersecurity, defensive cyber operations, information assurance, vulnerability management, security engineering, or a related field.
• Demonstrated experience assessing diverse enterprise IT environments and technologies.
• Strong understanding of enterprise networking, operating systems, virtualization, cloud infrastructure, applications, databases, identity and access management, and security architectures.
• Experience with security assessment and vulnerability-management tools and technologies such as SIEM, EDR/XDR, vulnerability scanners, network-security platforms, and configuration-management tools.
• Experience analyzing security logs and telemetry and correlating information across multiple security and IT platforms.
• Knowledge of NIST SP 800-53, NIST SP 800-37, RMF, STIGs, CIS benchmarks, and related cybersecurity requirements.
• DoD 8570 IAT Level II certification required.
• Must hold Top Secret security clearance. Counterintelligence polygraph desired.
