Cyber Operations Analyst

Vantor • Westminster, CO

7d • $105,000 - $154,000 • Hybrid

About The Position

Vantor is hiring an experienced Cyber Operations Analyst to support its Cybersecurity Operations Center (CSOC), focusing on incident response and investigation. The analyst will provide initial, front-line analysis and resolution of security alerts generated by SIEM and other monitoring solutions. Applicants must be U.S. citizens and willing and able to obtain a TS/SCI security clearance; the posting also states that cleared roles require an active U.S. Government security clearance and that clearance status is verified as a condition of employment. The position is based at the Westminster, Colorado office and requires on-site work three days per week, and more as needed. The role requires sharing on-call responsibilities, working non-standard hours, supporting cybersecurity investigations, and traveling up to 15% when required.

Requirements

• Must be a U.S. citizen and willing and able to obtain a U.S.-issued TS/SCI security clearance.
• Must work on site three days per week, and more as needed, in the Westminster, Colorado office.
• General knowledge of network and system/application architecture and administration principles.
• General knowledge of cybersecurity monitoring-system architecture, including SIEM and log-management architecture.
• Understanding of current trends in attacker and threat-actor tools, techniques, and procedures.
• Ability and willingness to share on-call responsibilities, work non-standard hours, support cybersecurity investigations, and travel up to 15% when required.

Nice To Haves

• Bachelor’s degree in information security, computer science, or another related field.
• Professional experience with AWS and cloud security technologies.
• Experience supporting digital forensic investigations, including endpoint, host-based, network, and cloud forensics.
• Coding experience with Python and/or Bash.
• Experience with network security and networking technologies, as well as system, security, and network-monitoring tools.

Responsibilities

• Monitor security tools and provide appropriate remediation responses when necessary.
• Escalate security events as needed or as driven by process.
• Perform or coordinate information gathering and analysis for IT teams responsible for clearing actions.
• Work with MDR analysts to triage and analyze real-time data feeds and alerts to detect potential intrusions.
• Work with Cybersecurity Engineering resources to address log-source generation and security-tool issues, and develop automation runbooks.
• Implement changes to required technologies, including adding log sources and types and modifying alerts.
• Collaborate with and support the vulnerability management team in identifying and raising awareness of zero-day vulnerabilities.
• Participate in incident response activities.

Benefits

• Robust 401(k) with company match.
• Mental health resources.
• Student loan repayment assistance.
• Adoption reimbursement.
• Pet insurance.
• Incentive eligible, with a target based on contribution, company performance, and/or individual results achieved; the specific plan and target amount will be determined based on the role and breadth of contributions.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed