Cyber Security Analyst

Ardent Principles, Inc.•Chantilly, VA

7h•$130,000 - $260,000•Onsite

About The Position

Ardent Principles is seeking a Cyber Security Analyst to support the protection and accreditation of production environments. The role focuses on cyber defense, risk management, security compliance, and identifying and mitigating cybersecurity risks through threat monitoring, incident response, vulnerability assessments, cloud security analysis, and continuous monitoring. The position is full-time and onsite in Chantilly, Virginia, during core hours. An active TS/SCI clearance with Full Scope Polygraph is required. The analyst will support security approvals for production deployments, assess and mitigate technical and non-technical risks, maintain compliance with security controls, and develop security documentation and monitoring dashboards.

Requirements

Active TS/SCI with Full Scope Polygraph.
Significant and current experience with real-time prevention, detection, and remediation of cyberattacks on internet-facing systems.
Experience in either offensive cyber operations, such as penetration testing, red teaming, or ethical hacking, or defensive cyber operations, such as security operations, incident response, or threat hunting.
Proficiency in scripting languages such as Python, PowerShell, or Bash.
Experience with SIEM systems such as Splunk, QRadar, or Elastic Stack.
Experience with AWS CloudTrail and CloudWatch logging.
Knowledge of network protocols, packet capture analysis, and NetFlow analysis.
Experience analyzing Windows event logs and Syslog.
Understanding of Windows and Linux operating systems and cloud environments including AWS, Azure, and GCP.
Knowledge of attack vectors, exploitation techniques, and defensive countermeasures.
Experience with A&A packages for obtaining security approvals for production system deployments.
Ability to review assessment reports, identify technical and non-technical security risks, and develop mitigation strategies including POA&Ms.
Experience supporting continuous monitoring and compliance with security access and control requirements.
Experience reviewing and authoring SSPs, security requirements, and A&A supporting documentation.
Experience writing and reviewing NIST 800-53 controls.
Experience running and interpreting Rapid7 scans.
Experience working with Amazon cloud security.
Experience with data visualization tools such as Tableau for developing monitoring dashboards.
Ability to work independently and as part of a team in a fast-paced environment.
Availability to work onsite in Chantilly, Virginia, during core hours.

Nice To Haves

Knowledge of information security standards such as ISO 27001 and NIST.
Ability to design, implement, and maintain IDS/IPS technologies.
Experience using offensive security tools and methodologies such as Metasploit, Nmap, Burp Suite, or Cobalt Strike.
Experience processing software applications through a sponsor's approval channels for operation in the sponsor's cloud offerings.
Experience working in a customer-facing environment.
Exceptional analytical and problem-solving skills, including the ability to dissect complex technical issues and propose effective solutions.

Responsibilities

Prevent, detect, and remediate cyberattacks on internet-facing systems in real time.
Conduct or support offensive or defensive cyber operations, including penetration testing, red teaming, security operations, incident response, or threat hunting.
Use scripting languages such as Python, PowerShell, or Bash for automation and analysis.
Work with SIEM systems such as Splunk, QRadar, or Elastic Stack.
Analyze AWS cloud logs, including CloudTrail and CloudWatch.
Analyze network protocols, packet captures, and NetFlow data.
Analyze security event logs, including Windows event logs and Syslog.
Apply knowledge of network protocols, Windows and Linux operating systems, and cloud environments including AWS, Azure, and GCP.
Identify attack vectors and exploitation techniques and apply defensive countermeasures.
Prepare Authority and Accreditation (A&A) packages to obtain security approvals for production system deployments.
Review assessment reports and help projects identify security risks and develop mitigation strategies, including Plans of Action and Milestones (POA&Ms).
Ensure system components and software applications meet continuous-monitoring and security-control compliance requirements.
Review and author System Security Plans (SSPs), security requirements, and other A&A supporting documentation.
Write and review NIST 800-53 controls.
Run and interpret Rapid7 scans.
Work with Amazon cloud security.
Use data visualization tools such as Tableau to develop dashboards that support stakeholder system monitoring and oversight.
Work effectively independently and as part of a team in a fast-paced environment.