Cyber Security Analyst

Booz Allen Hamilton•Indianapolis, IN

15h•$69,400 - $158,000•Remote

About The Position

As a security operations center analyst, you’re in the middle of the action, responding to and mitigating threats in real time. You’re the first line of cyber defense for your organization, and they look to you for guidance on best practices and security measures. We need a Tier 2 SOC analyst like you to help us secure critical infrastructure from the constant onslaught of cyber attacks. As a SOC analyst on our team, you’ll monitor and analyze threats, using state-of-the-art tools. You’ll use your cyber security skills to monitor, detect, and respond to cyber security alerts. You’ll review logs, tool output, and intelligence sources investigate security events, and follow escalation processes. You’ll identify and recommend improvements. You'll prepare reports and informational documents and work in a team environment. You’ll work with the team to understand, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You’ll analyze incidents to figure out just how many systems are affected and assist recovery efforts. You’ll combine threat intelligence, event data, and assessments from recent events, and identify patterns to understand attackers’ goals to stop them from succeeding. This is a great opportunity to hone your cyber security skills with hands-on experience in threat assessment and incident response. Join us. The world can’t wait.

Requirements

Experience with DoD information systems
Ability to support 24/7 operations via a shift work schedule
Top Secret clearance
HS diploma or GED
DoD 8570 IAT Level II and CSSP Analyst Certifications

Nice To Haves

Experience with DoD STIGs and SRGs and hardening guidance
Knowledge of ESS, ACAS, and DoD SIEM platforms
Ability to work well on a team
TS/SCI clearance
Bachelor's degree in Information Systems, Cybersecurity, Engineering, or a related field

Responsibilities

Monitor and analyze threats using state-of-the-art tools.
Monitor, detect, and respond to cyber security alerts.
Review logs, tool output, and intelligence sources to investigate security events.
Follow escalation processes.
Identify and recommend improvements.
Prepare reports and informational documents.
Work in a team environment to understand, mitigate, and respond to threats quickly.
Restore operations and limit the impact of security incidents.
Analyze incidents to determine the number of affected systems and assist recovery efforts.
Combine threat intelligence, event data, and assessments from recent events to identify patterns and understand attackers’ goals.