Cyber Security Analyst

Bowhead • Vicksburg, MS

7d

About The Position

Bowhead seeks an experienced Cyber Threat Analyst to join its team in Vicksburg, Mississippi. The Cyber Security Analyst monitors, tracks, and reports relevant events, types, and sources to the appropriate departments, working alongside Computer Network Defense (CND) Incident Responders and Cybersecurity Engineers. The role applies technical and functional expertise to collect, normalize, and characterize cyber incident and event data to identify anomalous or malicious activity, including intrusions, attacks, data loss, and other prohibited activities. The analyst also analyzes and correlates incidents and events that may involve foreign intelligence entities and warns of anticipated hostile attacks against DoD information systems or networks.

Requirements

• Bachelor of Science degree in Computer Science or a related field.
• At least a CompTIA Security+ certificate upon starting; must obtain a Certified Ethical Hacker (CEH) certificate within 90 days of starting.
• At least five years of Linux and networking experience.
• At least three years of experience with IDS, IPS, and host-based security solutions.
• At least two years of experience with malware analysis tools such as IDA Pro, Cuckoo Sandbox, or OllyDbg.
• Demonstrable strong programming skills, specifically in Python and C/C++.
• At least two years of Python programming experience.
• Intermediate to advanced skills in Microsoft Office software, including Word, Excel, Outlook, and PowerPoint.
• Ability to communicate effectively and interpret regulatory guidance and identified vulnerabilities for a wide audience.
• Presentation and strong public speaking skills.
• Strong interpersonal skills and good judgment, with the ability to work independently or as part of a team.
• Must currently hold a Secret-level security clearance.
• Ability to lift up to 25 pounds, stand and walk for prolonged periods, and periodically twist, bend, and squat.

Responsibilities

• Receive and initially analyze warning intelligence information, and appropriately share intelligence notifications, notes, and reports with customers.
• Analyze intelligence, forensic, and malware reverse-engineering reports to assess potential customer impact, determine indicators of compromise (IOCs), and use the IOCs to develop and distribute countermeasures.
• Evaluate incident IOCs for association with known computer network exploitation (CNE) groups and investigate potentially related infrastructure, including domain registration, IP ownership, VPN infrastructure, and malware strains, to identify proactive defensive measures.
• Assist customers in preventing or mitigating potential cyber-attack impacts by developing, distributing, and sharing countermeasures with peer DCO organizations and customers.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level