Cyber Defense Analyst (Level 1 / 1st Shift)
About The Position
Lockheed Martin Enterprise Operations is seeking a skilled Cyber Defense Analyst to join the Classified Cybersecurity Operations (C2Ops) Team in a highly visible enterprise environment that provides security operations center (SOC) support, cyber analysis, application development, and an extended hours support staff with the mission of defending the enterprise's classified computing assets. The ideal candidate should have experience in monitoring and detection, as well as incident response, to support the detection, containment, and eradication of malicious activities targeting customer networks. The ability to work independently and as part of a team, with a strong background in a variety of cyber defense tools, processes, and technologies, is essential.
Requirements
- Active Secret level security clearance with investigation or CV date within 5 years with ability to obtain Top Secret clearance and pass a Counterintelligence Polygraph.
- Ability to successfully complete additional enhanced security review in accordance with Government contract requirements and it is a condition of employment that individuals hired into positions requiring program clearance obtain and maintain such clearance within sufficient time to allow Lockheed Martin to meet its business needs.
- Experience with standard security and network environment tools and applications (Splunk, Trellix ePO, ACAS/Tenable.sc, Tanium, Microsoft Sentinel) for use in supporting the detection, response, mitigation, and reporting of cyber incidents.
- Understanding of threat models, attacker tactics, techniques, and procedures, operating system security requirements, information system auditing, and conducting cyber focused investigations.
Nice To Haves
- Minimum of current Top Secret security clearance with ability to obtain a Counterintelligence Polygraph.
- Bachelor's or master's degree from an accredited college in a related discipline.
- Knowledge of other security disciplines and how they impact and interact with information system security.
- Experience with Splunk and the ability to write queries, create dashboards.
- Experience with QMulos Products.
- Experience with using and building Tanium products.
- Understanding of basic usage of languages such as Python, PowerShell, and Bash for automation and data analysis.
- Experience with network design processes, to include understanding of security objectives, operational objectives, and risk mitigation strategy for the information system.
- Recognized cloud proficiency and experience with Cloud Security (CCSP, AWS, CSA, CompTIA Cloud+, CCSK, or others).
- Experience working in an Information System Security Operations Center conducting incident response and recovery.
- Understanding of malware functionality, static and dynamic analysis, and ability to identify IOCs, attributes and understanding of signatures.
Responsibilities
- Serve as the initial point of contact for security operations floor activities
- Develop, maintain, tune, and monitor cybersecurity content to enhance detection and prevention capabilities
- Investigate computer and information security incidents to determine the extent of compromise to information and automated information systems
- Provide network forensic and intrusion detection support for high-technology investigations
- Document cyber incident analysis thoroughly at an operational level
- Support the detection, response, mitigation, and reporting of cyber incidents
- Maintain consistent and effective communication across the team
- Stay updated on tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding, network security, and encryption
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Industry
Transportation Equipment Manufacturing
Number of Employees
5,001-10,000 employees
