Cyber Threat Analyst

TechSur Solutions•Reston, VA

16h•$105,000 - $110,000

About The Position

TechSur Solutions is seeking a Cyber Threat Analyst to support the judiciary’s Technology Security Operations (TSO). The analyst will plan, develop, and implement enterprise information security solutions addressing current and emerging security challenges. The role involves enterprise-scale security problem-solving, security product analysis, and risk management.

Requirements

At least 3 years of experience in compliance analysis, information security, or related fields.
Strong understanding of federal security frameworks, such as NIST, FedRAMP, FISMA, ISO 27001, and CIS controls.
Experience with governance, risk, and compliance (GRC) tools and methodologies.
Familiarity with security technologies such as SIEM, endpoint protection, access control, and vulnerability management.
Strong analytical and problem-solving skills with attention to detail.
Excellent written and verbal communication skills, including the ability to create policy documentation and reports.
Ability to work independently and collaboratively with cross-functional teams.
Bachelor’s degree in information security, computer science, risk management, or a related field; relevant years of experience may be considered in lieu of a degree.

Nice To Haves

Certifications such as CISSP, CISM, CEH, Security+, or GIAC.
Experience with cloud security and compliance, including AWS, Azure, or Google Cloud.
Familiarity with federal judiciary security policies and risk management frameworks.

Responsibilities

Continuously monitor networks, systems, and applications for signs of security breaches using security tools such as SIEM, IDS/IPS, firewalls, and EDR.
Analyze security alerts, log data, and network traffic to identify potential threats or vulnerabilities.
Assist with security incident response by investigating alerts, containing threats, and documenting findings.
Conduct regular vulnerability assessments and report risks and weaknesses in systems and applications.
Participate in internal and external security audits to assess compliance with security policies and industry regulations.
Generate reports on security incidents, vulnerabilities, and key security metrics for the security team and management.
Review access controls and recommend adjustments to ensure users have appropriate access to systems and data.
Ensure adherence to organizational security policies and procedures, and provide input for updates and improvements.
Collaborate with IT and development teams to identify and resolve security issues, including patch management and secure configuration.
Stay informed about emerging security threats and vulnerabilities and share relevant threat intelligence with the security team.