Cybersecurity Incident Response & Threat Detection Analyst

BMA TECHNICAL SERVICES INC • Remote, VA

7d • Remote

About The Position

BMA is seeking a Cybersecurity Incident Response & Threat Detection Analyst to join our team in support of an upcoming proposal effort. This is a remote, contingent position, with employment dependent upon contract award. The Cybersecurity Incident Response & Threat Detection Analyst participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment. Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity. Employs cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats. Reviews logged events for trends indicative of attack or compromise within the environment. Actively monitors logs and traffic for Advanced Persistent Threats (APT) and “low and slow” attacks within the environment. Maintains awareness of potential threats through the use of intelligence resources, including Open Source Intelligence (OSINT). Provides technical analysis and sustainment support for enterprise cybersecurity tools and applications and assists with the application of Defense-in-Depth signatures and perimeter defense controls to diminish network threats.

Requirements

• Five (5) years of relevant experience
• Two (2) years of experience performing root cause analysis of cybersecurity events and incidents
• Working knowledge of at least two types of security tools: Firewall, IDS/IPS, host-based antivirus, Data Loss Prevention, Vulnerability Management, Forensics, Malware Analysis, or Device Hardening
• Understanding of Defense-in-Depth
• Ability to build scripts and tools to enhance threat detection and incident response capabilities, preferably using SPL, Python, or PowerShell
• DoD Top Secret Clearance requirement
• Eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Responsibilities

• Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.
• Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
• Employs cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats.
• Reviews logged events for trends indicative of attack or compromise within the environment.
• Actively monitors logs and traffic for Advanced Persistent Threats (APT) and “low and slow” attacks within the environment.
• Maintains awareness of potential threats through the use of intelligence resources, including Open Source Intelligence (OSINT).
• Provides technical analysis and sustainment support for enterprise cybersecurity tools and applications.
• Assists with the application of Defense-in-Depth signatures and perimeter defense controls to diminish network threats.

Benefits

• Multiple healthcare coverage options (low deductible, high deductible, HSA eligible)
• Dental coverage
• Vision coverage
• Accident & illness coverage
• Short-term disability
• Long-term disability
• 401(k) plan with a 6% match
• Profit sharing based on company performance
• 100% Employee Stock Ownership Plan (ESOP)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed