Cyber Security Analyst

MIT Lincoln Laboratory•Lexington, MA

18h•$80,800 - $105,100•Onsite

About The Position

The Digital Solutions (DS) Cyber Security Sector is responsible for monitoring and protecting Laboratory information systems. The sector operates and maintains computer network defense (CND) tools and data sources (network and host level) in support of incident response and mitigation processes. Services include briefings to management, advising them of issues that may affect the Laboratory's security posture. The sector also conducts vulnerability assessment scanning at the network, system, and application levels, and coordinates mitigations and communications to the Laboratory community. The DS Cyber Security Team supports a high side (classified) Cybersecurity Operations Center which manages the ongoing security of multiple classified networks. This position will augment the existing staff in managing and operating the tools specific to the HS CSOC. Candidate will maintain and operate ACAS (Tenable Nessus), ESS (Trellix ePO), Splunk and other CSOC tools specific to the classified environment. These tools require specific accreditation and training from the government and have specific and extensive domain knowledge about operations within a classified government network.

Requirements

2+ years’ experience in the information security technology field.
Knowledge and experience with SIEM tools and practices, log aggregation, vulnerability scanning, remediation, and management, and endpoint security protection.
Technical skills in Linux and Windows server management with a strong familiarity with operating system diagnostics, network design and troubleshooting, and how to diagnose security controls and logs for evidence and indicators of compromise.
Good understanding of vulnerabilities, how vulnerabilities are detected and mitigated, how to rate the risk associated with an emerging vulnerability.
Basic threat management and how to do research across multiple sources to correlate and provide accurate scope to identify, contain, eradicate and recover from a security incident.
Familiarity and knowledge of containers, container security and DevSecOps.
Security+ certification or higher with the demonstrated ability to achieve ongoing educational training to maintain currency.
Ability and desire to work 100% on site given the requirements of the position.
Ability to obtain and maintain a government security clearance.

Nice To Haves

BS in an IT related field of study.
Training/Experience in Splunk, ACAS and/or ESS usage, administration and deployment.
Nessus Security Center and Manager administration.
Proficiency in scripting with languages such as bash, PowerShell, and python.
Proficiency in scripting with languages such as bash, PowerShell, and python.
Skills in Splunk administration and maintenance and SOC operations as well as familiarity with DoD regulations, like STIGs and the operational processes that support them.
Use of Splunk, ACAS and ESS as a consumer may be considered as a minimum requirement.
Demonstrated ability to work and communicate within a team.
Create and contribute to various teams in a collaborative and constructive manner.
Familiarity and knowledge of containers, container security and DevSecOps.
The ability to think critically and innovatively about the security solutions that can keep data safe while still allowing a business to flourish.
Ability to learn new technologies and disciplines quickly.

Responsibilities

Monitor and protect Laboratory information systems.
Operate and maintain computer network defense (CND) tools and data sources.
Support incident response and mitigation processes.
Provide briefings to management regarding security posture.
Conduct vulnerability assessment scanning at network, system, and application levels.
Coordinate mitigations and communications to the Laboratory community.
Maintain and operate ACAS (Tenable Nessus), ESS (Trellix ePO), Splunk and other CSOC tools specific to the classified environment.
Develop response to and communicate findings to groups.