Cybersecurity Analyst

SAIC•Panama City Beach, FL

9h•Onsite

About The Position

SAIC is seeking a Cybersecurity Analyst to support the Joint & Expeditionary Command and Control (JEXC2) program. The qualified candidate will be considered a subject matter expert (SME), mission essential, and deployable for Regional Combat Command (RCC) exercises or operations requiring C2 Family of Systems. The role provides customer site technical and analytical support.

Requirements

Cybersecurity Defense & Analysis
Incident Response
Threat Analysis
Exploitation Analysis
Cyber Investigations
Identity and Access Management operations
Use of Cyber tools
Utilizes COTS/GOTS applications
ticketing systems
lab systems
forensic applications
custom tools, techniques, and procedures (TTPs)
Maintains chain of custody on items of evidentiary value.

Responsibilities

Performs Cybersecurity Defense & Analysis, Incident Response, Threat Analysis, Exploitation Analysis and Cyber Investigations from the National Initiative for Cybersecurity Education (NICE) Framework.
Work is typically performed in a Security Operations Center (SOC), Network Operations & Security Center (NOSC), Joint Operations Center (JOC), or similar, and can be categorized as primarily Incident Investigation and Response, Security Operations, Incident Management, or similar.
Duties may include Identity and Access Management operations, or the use of Cyber tools to perform cyber work.
Utilizes COTS/GOTS applications, ticketing systems, lab systems, forensic applications and/or custom tools, techniques, and procedures (TTPs) to monitor systems for abnormal events.
Determines if events are to be deemed an incident.
Determines if incidents are due to malicious or nefarious actions by one or more threat actors.
Utilizes threat intelligence to determine if the incident is part of a named campaign in order to determine appropriate levels of response, or provide new intelligence based on investigative actions to threat intelligence teams, organizations, and/or external parties.
Obtains information and evidence to be utilized in legal proceedings or to provide to government counterparts for possible military, law enforcement, and/or counter-intelligence response actions/activities, Human Resources investigations, and/or management action.
Works with system owners to restore affected systems to secure baseline configurations.
Maintains chain of custody on items of evidentiary value.
Works with legal, HR, and other non-technical personnel to recommend formal proceedings against personnel.
Researches, evaluates, and recommends new security tools, techniques, and technologies.
Supports cyber metrics development, maintenance and reporting.
Provides briefings to senior staff.