Cyber Security Analyst-Senior Level (R-00172)

True Zero Technologies • Northern, VA, VA

1d

About The Position

The Cyber Security Analyst will be responsible for monitoring and responding to active threats and alerts occurring on customer networks and being part of a next generation Security Operations Center (SOC). Security Analysts will leverage various industry leading tools and methodologies to rapidly investigate potential threats, building new professional skills and capabilities along the way, all the while providing superior service to our customers. Selected candidates will also leverage and work with the MITRE ATT&CK framework, customer specific triage workflows, automation tools and SOAR platforms.

Requirements

• Minimum 6-7+ years relevant experience
• Bachelors Degree preferred
• Security+/CISSP preferred
• U.S. Citizenship as this position is for a U.S. federal customer
• Hands on experience working with enterprise SIEM solutions, Splunk preferred.
• Working knowledge of networking principles (TCP/UDP, ICMP, etc.), application protocols (i.e. HTTP/HTTPS, DNS, DHCP, etc.) and common operating systems
• Basic understanding of Active Directory and LDAP
• Ability to obtain then maintain a clearance may be required

Responsibilities

• Leverage various security tools to perform monitoring and analysis of security events/data to identify security risks and threats on customer networks.
• Utilize cyber hunt techniques to discover violations or threats.
• Implement, administer, and use cybersecurity tools, systems and applications; develop policies, standards, and guidelines to ensure secure enterprise-wise operations, performance and resiliency.
• Deploy and secure security systems, application layer and traditional firewalls, vulnerability management and forensics utilities, and other infrastructure deployed and maintained by the Information Security Office.
• Develop plans to safeguard information against unauthorized access modification, and destruction, and ensure organizational continuity of operations.
• Work with SIEM solutions such as Splunk and others to perform investigation and triage of incidents.
• Working with your team and broader True Zero community to stay up to date on the latest security trends and threats to improve the effectiveness of security programs for our customers.
• Following processes and procedures and providing refinement suggestions for them.
• Performing detailed documentation efforts to report on all investigative steps performed and coordinating with external teams/personnel.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior