Cyber Security Analyst

UIC Alaska • Vicksburg, MS

5d

About The Position

Bowhead is seeking an experienced Cyber Threat Analyst to work in Vicksburg, Mississippi. The position monitors, tracks, and reports relevant cyber events, types, and sources to appropriate departments, working alongside Computer Network Defense Incident Responders and Cybersecurity Engineers. The analyst collects, normalizes, and characterizes cyber incident and event data to identify anomalous or malicious activity, including intrusions, attacks, data loss, and other prohibited activity. The role also analyzes and correlates incidents and events that may involve foreign intelligence entities and warns of anticipated hostile attacks against Department of Defense information systems or networks.

Requirements

• Bachelor of Science degree in Computer Science or a related field.
• CompTIA Security+ certification required at the start of employment; must obtain Certified Ethical Hacker (CEH) certification within 90 days of starting.
• At least five years of Linux and networking experience.
• At least three years of experience with IDS, IPS, and host-based security solutions.
• At least two years of experience with malware analysis tools, such as IDA Pro, Cuckoo Sandbox, or OllyDbg.
• Demonstrable strong programming skills, specifically in Python and C/C++.
• At least two years of Python programming experience.
• Intermediate to advanced skills in Microsoft Office, including Word, Excel, Outlook, and PowerPoint.
• Ability to communicate effectively and explain regulatory guidance and identified vulnerabilities to a wide audience.
• Presentation and strong public-speaking skills.
• Strong interpersonal skills and good judgment, with the ability to work independently or as part of a team.
• Must currently hold a Secret-level security clearance.
• Must be able to lift up to 25 pounds, stand and walk for prolonged periods, and twist, bend, and squat periodically.

Responsibilities

• Receive and conduct initial analysis of warning intelligence information, and properly share intelligence notifications, notes, and reports with customers.
• Analyze intelligence reports, forensic reports, and malware reverse-engineering reports to determine indicators of compromise and identify potential customer impact.
• Use indicators of compromise to develop and distribute countermeasures to detect and prevent identified threats.
• Evaluate incident indicators of compromise for association with known computer network exploitation groups and investigate potentially related infrastructure, including domain registration, IP ownership, VPN infrastructure, and malware strains.
• Develop, distribute, and share countermeasures with customers and peer defensive cyber operations organizations to help prevent or mitigate the potential impact of cyberattacks on networks and information systems.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior