Cyber Security Analyst

• Provides detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities
• Characterizes and performs analysis of network traffic and system data to identify anomalous activity and potential threats to resources
• Performs security event and incident correlation using information gathered from a variety of sources within the enterprise
• Performs cyber incident triage to include determining scope, urgency, and potential impact; identify the specific vulnerability and make recommendations which enable expeditious remediation
• Tracks and documents cyber incidents from initial detection through final resolution
• Analyzes and assesses damage to the data / infrastructure as a result of cyber incidents
• Performs cyber incident trend analysis and reporting
• Hours: 24x7 Shift Work (4/10 shift schedule; hours dependent on location)

• Bachelor’s Degree or 4+ years of additional experience in a cyber role in lieu of a degree
• 5+ years of experience in cyber role
• CSSP-IR certification required (e.g. CEH, CySA+)
• IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required
• Experience with Windows and Linux operating systems.
• Experience working in a Cybersecurity Operations Center environment desired
• Experience with COTS technologies used in a Cybersecurity Operations Center environment desired
• Working knowledge of current COTS Cybersecurity technologies.
• Working knowledge of database and operating system security.
• Knowledge of latest security principles, techniques, and protocols.

Preferred Qualifications:

• Ability to function in a fast-paced environment and effectively manage multiple tasks simultaneously; coordinating resources and ensuring scheduled goals are met.
• Ability to effectively interact with various levels of senior management is necessary.
• Ability to make decisions and resolve problems effectively - Seek out information and data to evaluate, prioritize and formulate best solution or practice.
• Must be able to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities.

Clearance Requirements:

• Must have a current/active TS/SCI w/ Polygraph

Physical Requirements:

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.